Nuxt.js

2 CVEs framework

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-39239 Sep 23, 08:15 npm MEDIUM PATCH This Month

netlify-ipx is an on-Demand image optimization for Netlify using ipx. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Nuxt.js Netlify Ipx

NVD GitHub

CVSS 3.1

5.4

EPSS

0.4%

CVE-2019-13506 Jul 11, 14:15 npm MEDIUM PATCH This Month

@nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Nuxt.js Nuxt Devalue Nuxt Js

NVD GitHub

CVSS 3.0

6.1

EPSS

1.3%

CVE-2022-39239 npm

EPSS 0% CVSS 5.4

MEDIUM PATCH This Month

netlify-ipx is an on-Demand image optimization for Netlify using ipx. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Nuxt.js Netlify Ipx

NVD GitHub

CVE-2019-13506 npm

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

XSS Nuxt.js Nuxt Devalue +1

NVD GitHub