PatchTheCVEtsup vulnerabilities and fixes
Recent CVEs affecting tsup, with upgrade or downgrade steps. 1 tracked.
tsup has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-03-03. Highest priority: CVE-2024-53384 (score 27/100).
- CVE-2024-53384 MEDIUM 5.1 DOWNGRADE A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script
FAQ
How do I fix tsup vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tsup being exploited right now?
None of the tracked tsup CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tsup CVE should I patch first?
CVE-2024-53384 currently ranks highest (27/100): A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script .