Snyk Security Database

@nuxt/nitro-server is a Nitro server integration for Nuxt

Affected versions of this package are vulnerable to Information Exposure through the Chrome DevTools workspace endpoint in packages/nitro-server/src/index.ts. An attacker can retrieve the project’s absolute filesystem root and persistent workspace UUID by sending a direct request to /.well-known/appspecific/com.chrome.devtools.json on a network-reachable dev server and spoofing local-looking request headers such as Host: localhost. The endpoint’s isLocalDevRequest gate trusts request metadata instead of the connected TCP peer address, so a LAN client that can reach the dev server can bypass the intended local-only check without browser-origin headers. This leaks sensitive project path information to anyone with network access to the development port, potentially exposing workspace layout and identifiers used by Chrome DevTools auto-mapping.

Workarounds

• Do not bind the Nuxt dev server to a non-loopback interface on an untrusted network; keep it reachable only from localhost, or restrict access to the dev port with a firewall. This prevents LAN clients from reaching /.well-known/appspecific/com.chrome.devtools.json and leaking the project root and workspace UUID.
• Disable experimental.chromeDevtoolsProjectSettings in nuxt.config. This prevents the Chrome DevTools workspace endpoint from being enabled on the dev server.

pydantic-ai-slim is an Agent Framework / shim to use Pydantic with LLMs, slim package

Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) through UIAdapter.sanitize_messages in pydantic_ai_slim/pydantic_ai/ui/_adapter.py and VercelAIAdapter.from_request/dispatch_request in pydantic_ai_slim/pydantic_ai/ui/vercel_ai/_adapter.py. An attacker can cause the server to fetch arbitrary provider or cloud-storage files with its own credentials by submitting message history that contains client-controlled UploadedFile references in providerMetadata. This lets the attacker read files the application’s model-provider or storage identity can access, exposing private objects or other tenants’ data to the user.

org.apache.httpcomponents.client5:httpclient5 is a HttpClient component of the Apache HttpComponents project.

Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime via the ContentCompressionExec response decoding path in httpclient5/src/main/java/org/apache/hc/client5/http/impl/classic/ContentCompressionExec.java. An attacker can exhaust the connection pool by sending a response with an invalid or unsupported Content-Encoding header that causes decoding to fail. When the classic I/O client raises the exception, it leaves the underlying response stream and connection unreleased, so pooled connections remain tied up and subsequent requests stall or fail.