← Database

CVE-2024-53384

MEDIUM CVSS: 5.1 Published: 2025-03-03 Modified: 2026-06-17

Description

A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjs_shims.js components

Affected Platforms

Egoist Tsup

Weakness Type

CWE-79

References