Skip to content
OpenAdvisories

Product · nuxt

content

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-102650

    Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API

    Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components. From 3.0.0 until 3.15.2, the unauthenticated POST /__nuxt_content/:collection/query endpoint accepts an attacker-controlled sql field in src/runtime/api/query.po…

    nuxt content @nuxt/content npm