medium5.1
CVE-2024-53384
tsup DOM Clobbering vulnerability
Impact
A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjs_shims.js components
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | tsup | <= 8.3.4 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Egoist | Tsup | Version 8.3.4 |