Skip to content
OpenAdvisories

Package · npm

nuxt

26 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-119200 Public exploit

    Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes

    Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, Nuxt resolves literal or percent-encoded dot segments before rendering a page while Nitro routing, server/middleware checks, and server route rules evaluate the unresolved pa…

    nuxt nuxt nitro-server nuxt npm
  • Medium 6.2
    CVE-2026-72744 Public exploit

    Nuxt before 4.5.1 Information Disclosure via Chrome DevTools

    Nuxt versions >= 4.4.7 and < 4.5.1, and >= 3.21.7 and < 3.21.10, contain an information disclosure vulnerability in the development server's Chrome DevTools workspace endpoint (GET /.well-known/appspecific/com.chrome.devtools.json). The endpoint's local-reque…

    nuxt nuxt nuxt npm
  • High 7.5
    CVE-2025-27415 Public exploit

    Nuxt allows DOS via cache poisoning with payload rendering response

    Nuxt is an open-source web development framework for Vue.js. Prior to 3.16.0, by sending a crafted HTTP request to a server behind an CDN, it is possible in some circumstances to poison the CDN cache and highly impacts the availability of a site. It is possib…

    nuxt nuxt nuxt npm