nuxt-api-party vulnerabilities

2 known vulnerabilities in nuxt-api-party from Johannschopplich. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  nuxt-api-party: Out-of-bounds Write

  CVE-2023-49800Dec 9, 2023Johannschopplich

  `nuxt-api-party` is an open source module to proxy API requests. The library allows the user to send many options directly to `ofetch`. There is no filter on which options are available. We can abuse the retry logic to cause the server to crash from a stack ov

• 7.5 High severity

  nuxt-api-party: Server-Side Request Forgery

  CVE-2023-49799Dec 9, 2023Johannschopplich

  `nuxt-api-party` is an open source module to proxy API requests. nuxt-api-party attempts to check if the user has passed an absolute URL to prevent the aforementioned attack. This has been recently changed to use the regular expression `^https?://`, however th