Login Request a demo
NU
Product
Nuxt/rspack-builder
by Nuxt · last CVE Jun 12, 2026
2
CVEs
0
On KEV
5.7
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 0
Severity
All severities2Critical0High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Nuxt/rspack-builder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-49993
5.7
0%
Jun 12
@nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g)
Affected: 3.15.4 before 3.21.7; 4.0.0 before 4.4.7
CVE-2026-45670
5.4
0%
Jun 12
Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99)
Affected: 3.12.2 before 3.21.5; 4.0.0 before 4.4.5
Showing 2