Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

nuxt

npm

Nuxt is a free and open-source framework with an intuitive and extendable way to create type-safe, performant and production-grade full-stack web applications and websites with Vue.js.

View on github.com · View on npmjs.org

Security Advisories for nuxt in npm

Moderate
3 days ago

Nuxt dev server discloses project root and workspace UUID via the Chrome DevTools workspace endpoint GSA_kwCzR0hTQS03YzR2LWZ3Z3ctOXJmN84ABhvi

npm nuxt
High
5 days ago

Nuxt: Unauthenticated CPU exhaustion parsing and hashing the Nuxt island endpoint body before hash validation GSA_kwCzR0hTQS05cGdmLTM4NGctcDdtds4ABhh2

npm nuxt
High
5 days ago

Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props GSA_kwCzR0hTQS05NDczLTVmOWotOTR3cc4ABhhI

npm nuxt
Moderate
5 days ago

Nuxt: Unauthorized Component Instantiation via Server Island Props GSA_kwCzR0hTQS00OGhyLTUyNGMtdjV3M84ABhhG

npm nuxt
High
5 days ago

Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients GSA_kwCzR0hTQS13bTh3LTZxam0tY3Y0M84ABhhF

npm nuxt
High
5 days ago

Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721) GSA_kwCzR0hTQS1oeHZoLTRoM3ctcHJwOc4ABhhE

npm nuxt
High
5 days ago

Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering GSA_kwCzR0hTQS1oeGNyLWhtODgtbXBxNs4ABhhD

npm nuxt
Low
about 2 months ago

Cross-site scripting via <NoScript> slot content in Nuxt's head components GSA_kwCzR0hTQS1tM3EyLXA0ZnctdzM4bc4ABY2d

npm nuxt
Moderate
about 2 months ago

Nuxt: Reflected XSS in `<NuxtLink>` via unsanitised `javascript:` or `data:` URL GSA_kwCzR0hTQS05MzR3LTg3cWgtcXIyNs4ABYy3

npm nuxt
Moderate
about 2 months ago

Nuxt dev server vite-node IPC socket is world-connectable on Linux GSA_kwCzR0hTQS01MzRoLWMzY3ctdjNoOc4ABYy2

npm nuxt
High
about 2 months ago

Nuxt: Route-rule middleware bypass via case-sensitivity mismatch between vue-router and the routeRules matcher GSA_kwCzR0hTQS1tbTdtLTkyZzgtN200N84ABYy1

npm nuxt
Moderate
about 2 months ago

Nuxt: URL-handling weaknesses in `navigateTo` and `reloadNuxtApp`: SSR open redirect, client-side script execution via the `open` option, and protocol-relative bypass in `reloadNuxtApp` GSA_kwCzR0hTQS1jOWN2LW1xMm0tcHBwM84ABYy0

npm nuxt
Low
about 2 months ago

Nuxt: Dev server discloses project absolute path and persistent workspace UUID via `/.well-known/appspecific/com.chrome.devtools.json` GSA_kwCzR0hTQS1ycTd3LWczMzctMzlxcc4ABYsi

npm nuxt
Moderate
2 months ago

Nuxt's route middleware is not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*` GSA_kwCzR0hTQS1oZzNmLTI4cmctNGp4as4ABXu0

npm nuxt, @nuxt/nitro-server
Low
3 months ago

Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning GSA_kwCzR0hTQS1nOHdqLTNjcjMtNnc3ds4ABXHs

npm @nuxt/nitro-server, nuxt
Moderate
3 months ago

Nuxt: Reflected XSS in `navigateTo()` external redirect GSA_kwCzR0hTQS1meDZqLXc1dzUtaDQ2OM4ABXGq

npm nuxt
Low
11 months ago

Nuxt has Client-Side Path Traversal in Nuxt Island Payload Revival GSA_kwCzR0hTQS1wNmpxLTh2YzQtNzlmNs4ABMUE

npm nuxt
High
over 1 year ago

Nuxt allows DOS via cache poisoning with payload rendering response GSA_kwCzR0hTQS1qdmhtLWdqcmgtM2g5M84ABFp1

npm nuxt
Potential
Moderate
over 1 year ago

Opening a malicious website while running a Nuxt dev server could allow read-only access to code GSA_kwCzR0hTQS00Z2Y3LWZmOHgtaHE5Oc4ABD1p

npm @nuxt/rspack-builder, @nuxt/webpack-builder
Potential
Moderate
over 1 year ago

Opening a malicious website while running a Nuxt dev server could allow read-only access to code GSA_kwCzR0hTQS0yNDUyLTZ4ajgtamg0N84ABD1o

npm @nuxt/vite-builder
Critical
about 2 years ago

Nuxt vulnerable to remote code execution via the browser when running the test locally GSA_kwCzR0hTQS12Nzg0LWZqamgtZjhyNM4AA-Ye

npm nuxt
Moderate
about 2 years ago

nuxt vulnerable to Cross-site Scripting in navigateTo if used after SSR GSA_kwCzR0hTQS12ZjZyLTg3cTQtMnZqZs4AA-Yd

npm nuxt
Potential
High
about 2 years ago

Nuxt Devtools has a Path Traversal: '../filedir' GSA_kwCzR0hTQS1yY3ZnLXJnZjctcHBwds4AA-Yc

npm @nuxt/devtools
Critical
about 3 years ago

nuxt Code Injection vulnerability GSA_kwCzR0hTQS1nYzM0LTV2NDMtaDd2OM4AAz0l

npm nuxt

Filter by Severity

Moderate 10 High 8 Low 4 Critical 2