CyberSecBulletin

Johannschopplich vulnerabilities

We track 2 vulnerabilities in Johannschopplich products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 9, 2023.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Johannschopplich vulnerabilities

  • 7.5 High severity

    nuxt-api-party: Out-of-bounds Write

    CVE-2023-49800Johannschopplich

    `nuxt-api-party` is an open source module to proxy API requests. The library allows the user to send many options directly to `ofetch`. There is no filter on which options are available. We can abuse the retry logic to cause the server to crash from a stack ov

  • 7.5 High severity

    nuxt-api-party: Server-Side Request Forgery

    CVE-2023-49799Johannschopplich

    `nuxt-api-party` is an open source module to proxy API requests. nuxt-api-party attempts to check if the user has passed an absolute URL to prevent the aforementioned attack. This has been recently changed to use the regular expression `^https?://`, however th