{"action":"Upgrade nuxt to 3.4.3 or later.","affected":[{"fixed":"3.4.3","introduced":"3.4.0"}],"component":"nuxt","cve_ids":["CVE-2023-3224"],"ecosystem":"npm","epss":0.58648,"exploited":false,"fixed_versions":["3.4.3"],"ghsa_id":"GHSA-gc34-5v43-h7v8","id":"tcs_01M5KFR8WPJ91V1M1GNE9W5NEF","modified_at":"2024-11-18T16:26:30Z","published_at":"2023-06-13T18:30:40Z","references":["https://osv.dev/vulnerability/GHSA-gc34-5v43-h7v8","https://nvd.nist.gov/vuln/detail/CVE-2023-3224","https://github.com/nuxt/nuxt/issues/21694","https://github.com/nuxt/nuxt/commit/65a8f4eb3ef1b249a95fd59e323835a96428baff","https://github.com/nuxt/nuxt/commit/72ba53efbc2384f802d654fffd92eaf36a81b507","https://github.com/nuxt/nuxt","https://github.com/nuxt/nuxt/commits/v3.4.3","https://huntr.dev/bounties/1eb74fd8-0258-4c1f-a904-83b52e373a87"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-gc34-5v43-h7v8","url":"https://osv.dev/vulnerability/GHSA-gc34-5v43-h7v8"}],"summary":"nuxt Code Injection vulnerability"}