Skip to content
OpenAdvisories

Package · npm

storefront-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    CVE-2020-11883 Public exploit EPSS 15%

    Diavante vue-storefront-api and storefront-api disclose stack trace

    In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names.

    vue-storefront-api storefront-api npm