vuestorefront/vue-storefront-api

vuestorefront/vue-storefront-api

GitHubGitHub
GitHubgithub.com
www.vuestorefront.iowww.vuestorefront.io
Releases40
Frequency1 month 1 day
Last Release
Stars344
Vue.js storefront for Magento2 (and not only) - data backend
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-11883↗
5.3 MEDIUM5 MEDIUM

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names.