Skip to content
OpenAdvisories

Package · npm

nuxt-api-party

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2023-49799

    Server-Side Request Forgery in nuxt-api-party

    `nuxt-api-party` is an open source module to proxy API requests. nuxt-api-party attempts to check if the user has passed an absolute URL to prevent the aforementioned attack. This has been recently changed to use the regular expression `^https?://`, however t…

    johannschopplich nuxt-api-party nuxt-api-party npm
  • High 7.5
    CVE-2023-49800

    Denial of service by abusing `fetchOptions.retry` in nuxt-api-party

    `nuxt-api-party` is an open source module to proxy API requests. The library allows the user to send many options directly to `ofetch`. There is no filter on which options are available. We can abuse the retry logic to cause the server to crash from a stack o…

    johannschopplich nuxt-api-party nuxt-api-party npm