NU
Product
nuxt
31
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 1High 10Medium 18Low 2
Watch
Add nuxt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-3224 | 9.8 | Jun 13 | Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3 Affected: 3.4.0 before 3.4.3 |
| CVE-2024-34344 | 8.8 | Aug 5 | Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js Affected: 3.4.0 before 3.12.4 |
| CVE-2024-23657 | 8.8 | Aug 5 | Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js Affected: before 1.3.9 |
| CVE-2026-71315 | 8.2 | Aug 5 | Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721) Affected: >= 4.4.7, < 4.5.1; >= 3.21.7, < 3.21.10 |
| CVE-2026-53721 | 8.2 | Jun 12 | Nuxt: Route-rule middleware bypass via case-sensitivity mismatch between vue-router and the routeRules matcher Affected: >= 3.11.0, < 3.21.7; >= 4.0.0, < 4.4.7 |
| CVE-2026-71320 | 8.1 | Aug 5 | Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props Affected: >= 4.0.0, < 4.5.1; >= 3.4.0, < 3.21.10 |
| CVE-2026-71321 | 7.5 | Aug 5 | Nuxt: Unauthenticated CPU exhaustion parsing and hashing the Nuxt island endpoint body before hash validation Affected: >= 4.0.0, < 4.5.1; >= 3.1.0, < 3.21.10 |
| CVE-2026-71316 | 7.5 | Aug 5 | Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients Affected: >= 4.4.0, < 4.5.1 |
| CVE-2026-71314 | 7.5 | Aug 5 | Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering Affected: >= 4.0.0, < 4.5.1; >= 3.1.0, < 3.21.10 |
| CVE-2025-27415 | 7.5 | Mar 19 | Nuxt is an open-source web development framework for Vue.js Affected: 3.0.0 before 3.16.0 |
| CVE-2024-42352 | 7.5 | Aug 5 | Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js Affected: before 1.4.5 |
| CVE-2026-114131 New | 6.5 | Oct 21 | Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes Affected: >= 4.0.0, < 4.4.4; >= 3.11.0, < 3.21.4 |
| CVE-2026-114132 New | 6.3 | Oct 21 | Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive Affected: < 4.6.2 |
| CVE-2026-72744 | 6.2 | Aug 11 | Nuxt before 4.5.1 Information Disclosure via Chrome DevTools Affected: 4.4.7 before 4.5.1; 3.21.7 before 3.21.10 |
| CVE-2026-56698 | 6.1 | Jun 22 | Nuxt - Cross-Site Scripting via navigateTo open Option Affected: 4.0.0 before 4.4.7; before 3.21.7 |
| CVE-2026-56697 | 6.1 | Jun 22 | Nuxt - Open Redirect via Protocol-Relative Paths in reloadNuxtApp Affected: 4.0.0 before 4.4.7; before 3.21.7 |
| CVE-2026-56326 | 6.1 | Jun 22 | Nuxt - Server-Side Open Redirect via Path-Normalization Bypass in navigateTo Affected: 4.0.0 before 4.4.7; before 3.21.7 |
| CVE-2026-56317 | 6.1 | Jun 20 | Nuxt - Cross-Site Scripting via NoScript Component Slot Content Affected: 4.0.0 before 4.4.7; before 3.21.7 |
| CVE-2024-34343 | 6.1 | Aug 5 | Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js Affected: before 3.12.4 |
| CVE-2023-0878 | 6.1 | Feb 17 | Cross-site Scripting (XSS) - Generic in GitHub repository nuxt/framework prior to 3.2.1 Affected: after 3.0.0 before 3.2.1; 3.0.0; 3.0.0; 3.0.0 |
| CVE-2026-49993 | 5.7 | Jun 12 | @nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g) Affected: >= 3.15.4, < 3.21.7; >= 4.0.0, < 4.4.7 |
| CVE-2026-56301 | 5.5 | Jun 23 | Nuxt - Arbitrary File Read via World-Connectable vite-node IPC Socket on Linux Affected: 4.0.0 before 4.4.7; 3.18.0 before 3.21.7 |
| CVE-2026-114133 New | 5.4 | Oct 21 | Nuxt server islands render `useHeadSafe` input without sanitisation Affected: >= 3.13.0, < 4.6.2 |
| CVE-2026-53722 | 5.4 | Jun 12 | Nuxt: Reflected XSS in `<NuxtLink>` via unsanitised `javascript:` or `data:` URL Affected: < 3.21.7; >= 4.0.0, < 4.4.7 |
| CVE-2026-45669 | 5.4 | Jun 12 | Nuxt: Reflected XSS in `navigateTo()` external redirect Affected: >= 3.4.3, < 3.21.6; >= 4.0.0-alpha.1, < 4.4.6 |
| CVE-2026-45670 | 5.4 | Jun 12 | Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99) Affected: >= 3.15.4, < 3.21.6; >= 4.0.0-alpha.1, < 4.4.6 |
| CVE-2026-46342 | 5.4 | Jun 12 | Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning Affected: >= 3.1.0, < 3.21.6; >= 4.0.0-alpha.1, < 4.4.6 |
| CVE-2026-47200 | 5.3 | Jun 12 | Nuxt: Route middleware not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*` Affected: >= 3.11.0, < 3.21.6; >= 4.0.0-alpha.1, < 4.4.6 |
| CVE-2026-71318 | 4.8 | Aug 5 | Nuxt: Unauthorized Component Instantiation via Server Island Props Affected: >= 4.0.0, < 4.5.1; >= 3.1.0, < 3.21.10 |
| CVE-2025-59414 | 3.1 | Sep 17 | Nuxt is an open-source web development framework for Vue.js Affected: 3.6.0 before 3.19.0; 4.0.0 before 4.1.0 |
| CVE-2026-114130 New | 2.3 | Oct 21 | Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled Affected: < 4.6.0 |
Showing 31