← Back

Tsup

tsup

Vendor: Egoist • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Egoist
1Tsup
Jun 17, 2026
Mar 3, 2025
N/A· v4
5.1 MEDIUM· v3
N/A· v2
A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjs_shims.js components