@nuxt/webpack-builder
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| @nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g) | @nuxt/rspack-builder@nuxt/webpack-builder | npm | Medium | Fix reported | |
| Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99) | @nuxt/rspack-builder@nuxt/webpack-builder | npm | Medium | Fix reported | |
| Opening a malicious website while running a Nuxt dev server could allow read-only access to code | @nuxt/rspack-builder@nuxt/webpack-builder | npm | Medium | Fix reported |