CVE-2019-13506

Published July 11th, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

2

PROJECTS

Description

@nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS.

the full-stack Vue framework

GitHub

60.4K

nuxt-contrib/devalue

Gets the job done when JSON.stringify can't

GitHub

96