Program: CWE-79
Project: CVE-2019-13506
Buggy source:
{
  "name": "nuxt.js",
  "private": true,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/nuxt/nuxt.js.git"
  },
  "workspaces": [
    "packages/*",
    "distributions/*"
  ],
  "scripts": {
    "build": "yarn clean && yarn pkg",
    "changelog": "node -r esm scripts/changelog.js",
    "clean": "yarn clean:build && yarn clean:examples && yarn clean:test",
    "clean:build": "rimraf distributions/*/dist packages/*/dist",
    "clean:examples": "rimraf examples/*/dist examples/*/.nuxt",
    "clean:test": "rimraf test/fixtures/*/dist test/fixtures/*/.nuxt*/",
    "coverage": "codecov",
    "dev": "node -r esm ./scripts/dev.js",
    "postinstall": "lerna link && yarn dev",
    "lint": "eslint --ext .js,.mjs,.vue .",
    "lint:app": "eslint-multiplexer eslint --ignore-path packages/vue-app/template/.eslintignore 'test/fixtures/!(missing-plugin)/.nuxt!(-dev)/**' | eslint-multiplexer -b",
    "nuxt": "node -r esm ./packages/cli/bin/nuxt-cli.js",
    "pkg": "node -r esm ./scripts/package",
    "test": "yarn test:fixtures && yarn test:unit && yarn test:types",
    "test:e2e": "jest -i test/e2e --forceExit",
    "test:fixtures": "jest test/fixtures --forceExit",
    "test:lint": "yarn lint",
    "test:types": "tsc -p test/types",
    "test:unit": "jest test/unit packages --forceExit"
  },
  "devDependencies": {
    "@babel/core": "^7.4.3",
    "@babel/preset-env": "^7.4.3",
    "@nuxtjs/eslint-config": "^0.0.1",
    "@vue/server-test-utils": "^1.0.0-beta.29",
    "@vue/test-utils": "^1.0.0-beta.29",
    "babel-eslint": "^10.0.1",
    "babel-jest": "^24.7.1",
    "babel-plugin-dynamic-import-node": "^2.2.0",
    "cheerio": "^1.0.0-rc.3",
    "codecov": "^3.3.0",
    "consola": "^2.6.0",
    "cross-env": "^5.2.0",
    "cross-spawn": "^6.0.5",
    "eslint": "^5.16.0",
    "eslint-config-standard": "^12.0.0",
    "eslint-multiplexer": "^1.0.4",
    "eslint-plugin-import": "^2.17.0",
    "eslint-plugin-jest": "^22.4.1",
    "eslint-plugin-node": "^8.0.1",
    "eslint-plugin-promise": "^4.1.1",
    "eslint-plugin-standard": "^4.0.0",
    "eslint-plugin-vue": "^5.2.2",
    "esm": "3.2.20",
    "execa": "^1.0.0",
    "express": "^4.16.4",
    "finalhandler": "^1.1.1",
    "fork-ts-checker-webpack-plugin": "^1.0.2",
    "fs-extra": "^7.0.1",
    "get-port": "^5.0.0",
    "glob": "^7.1.3",
    "is-wsl": "^1.1.0",
    "jest": "^24.7.1",
    "jsdom": "^14.0.0",
    "klaw-sync": "^6.0.0",
    "lerna": "^3.13.2",
    "lodash": "^4.17.11",
    "node-fetch": "^2.3.0",
    "puppeteer-core": "^1.14.0",
    "request": "^2.88.0",
    "request-promise-native": "^1.0.7",
    "rimraf": "^2.6.3",
    "rollup": "^1.10.0",
    "rollup-plugin-alias": "^1.5.1",
    "rollup-plugin-babel": "^4.3.2",
    "rollup-plugin-commonjs": "^9.3.4",
    "rollup-plugin-json": "^4.0.0",
    "rollup-plugin-license": "^0.8.1",
    "rollup-plugin-node-resolve": "^4.2.3",
    "rollup-plugin-replace": "^2.2.0",
    "sort-package-json": "^1.22.1",
    "ts-jest": "^24.0.2",
    "ts-loader": "^5.3.3",
    "ts-node": "^8.0.3",
    "tslint": "^5.15.0",
    "typescript": "^3.4.3",
    "vue-jest": "^4.0.0-beta.2",
    "vue-property-decorator": "^8.1.0"
  }
}


Fixed version (ground truth):
{
  "name": "nuxt.js",
  "private": true,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/nuxt/nuxt.js.git"
  },
  "workspaces": [
    "packages/*",
    "distributions/*"
  ],
  "scripts": {
    "build": "yarn clean && yarn pkg",
    "changelog": "node -r esm scripts/changelog.js",
    "clean": "yarn clean:build && yarn clean:examples && yarn clean:test",
    "clean:build": "rimraf distributions/*/dist packages/*/dist",
    "clean:examples": "rimraf examples/*/dist examples/*/.nuxt",
    "clean:test": "rimraf test/fixtures/*/dist test/fixtures/*/.nuxt*/",
    "coverage": "codecov",
    "dev": "node -r esm ./scripts/dev.js",
    "postinstall": "lerna link && yarn dev",
    "lint": "eslint --ext .js,.mjs,.vue .",
    "lint:app": "eslint-multiplexer eslint --ignore-path packages/vue-app/template/.eslintignore 'test/fixtures/!(missing-plugin)/.nuxt!(-dev)/**' | eslint-multiplexer -b",
    "nuxt": "node -r esm ./packages/cli/bin/nuxt-cli.js",
    "pkg": "node -r esm ./scripts/package",
    "test": "yarn test:fixtures && yarn test:unit && yarn test:types",
    "test:e2e": "jest -i test/e2e --forceExit",
    "test:fixtures": "jest test/fixtures --forceExit",
    "test:lint": "yarn lint",
    "test:types": "tsc -p test/types",
    "test:unit": "jest test/unit packages --forceExit"
  },
  "devDependencies": {
    "@babel/core": "^7.4.3",
    "@babel/preset-env": "^7.4.3",
    "@nuxtjs/eslint-config": "^0.0.1",
    "@vue/server-test-utils": "^1.0.0-beta.29",
    "@vue/test-utils": "^1.0.0-beta.29",
    "babel-eslint": "^10.0.1",
    "babel-jest": "^24.7.1",
    "babel-plugin-dynamic-import-node": "^2.2.0",
    "cheerio": "^1.0.0-rc.3",
    "codecov": "^3.3.0",
    "consola": "^2.6.0",
    "cross-env": "^5.2.0",
    "cross-spawn": "^6.0.5",
    "eslint": "^5.16.0",
    "eslint-config-standard": "^12.0.0",
    "eslint-multiplexer": "^1.0.4",
    "eslint-plugin-import": "^2.17.1",
    "eslint-plugin-jest": "^22.4.1",
    "eslint-plugin-node": "^8.0.1",
    "eslint-plugin-promise": "^4.1.1",
    "eslint-plugin-standard": "^4.0.0",
    "eslint-plugin-vue": "^5.2.2",
    "esm": "3.2.20",
    "execa": "^1.0.0",
    "express": "^4.16.4",
    "finalhandler": "^1.1.1",
    "fork-ts-checker-webpack-plugin": "^1.0.2",
    "fs-extra": "^7.0.1",
    "get-port": "^5.0.0",
    "glob": "^7.1.3",
    "is-wsl": "^1.1.0",
    "jest": "^24.7.1",
    "jsdom": "^14.0.0",
    "klaw-sync": "^6.0.0",
    "lerna": "^3.13.2",
    "lodash": "^4.17.11",
    "node-fetch": "^2.3.0",
    "puppeteer-core": "^1.14.0",
    "request": "^2.88.0",
    "request-promise-native": "^1.0.7",
    "rimraf": "^2.6.3",
    "rollup": "^1.10.0",
    "rollup-plugin-alias": "^1.5.1",
    "rollup-plugin-babel": "^4.3.2",
    "rollup-plugin-commonjs": "^9.3.4",
    "rollup-plugin-json": "^4.0.0",
    "rollup-plugin-license": "^0.8.1",
    "rollup-plugin-node-resolve": "^4.2.3",
    "rollup-plugin-replace": "^2.2.0",
    "sort-package-json": "^1.22.1",
    "ts-jest": "^24.0.2",
    "ts-loader": "^5.3.3",
    "ts-node": "^8.0.3",
    "tslint": "^5.15.0",
    "typescript": "^3.4.3",
    "vue-jest": "^4.0.0-beta.2",
    "vue-property-decorator": "^8.1.0"
  }
}