Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-11883

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-9wxj-37p8-49ff

Diavante vue-storefront-api and storefront-api disclose stack trace In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names.

gitlab/npm/storefront-api/CVE-2020-11883

Generation of Error Message Containing Sensitive Information In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names.

gitlab/npm/vue-storefront-api/CVE-2020-11883

Generation of Error Message Containing Sensitive Information In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names.