Homepage
About Snyk

@nuxt/icon@1.3.1 vulnerabilities

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the @nuxt/icon package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Server-Side Request Forgery (SSRF)

@nuxt/icon is a nuxt-icon

Affected versions of this package are vulnerable to Server-Side Request Forgery (SSRF) due to improper user input sanitization in the new URL constructor used in the /api/_nuxt_icon endpoint. By modifying the scheme and host within the URL, an attacker can manipulate the request URL to redirect requests to an unintended server.

How to fix Server-Side Request Forgery (SSRF)?

Upgrade @nuxt/icon to version 1.4.5 or higher.

<1.4.5
Go back to all versions of this package