A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjs_shims.js components
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| tsup(npm) | 0 | N/A | N/A |
CVSS Metrics
