| Package | Affected versions | Patched versions |
|---|---|---|
| tsup | = 8.3.4 | |
| tsup | ≤ 8.3.4 |
A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjs_shims.js components
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free