nuxt

Records45All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

nuxt records in CISA KEV

No nuxt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Nuxt 18 records HIGH Framework 2 records HIGH Nuxt/nitro-server 2 records HIGH Nuxt/rspack-builder 2 records MEDIUM Nuxt/webpack-builder 2 records MEDIUM Og Image 2 records HIGH Devtools 1 record LOW

Records

2 records in Nuxt/nitro-server · all components

TI-2026-34788 CVE-2026-47200 · GHSA-hg3f-28rg-4jxj

Nuxt: Route middleware not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`

HIGH 67

Nuxt is an open-source web development framework for Vue.js.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0023 Published 2026-06-12 Fixed in 3.21.6, 4.4.6 CWE-284

TI-2026-34062 CVE-2026-46342 · GHSA-g8wj-3cr3-6w7v

Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning

LOW 11

Nuxt is an open-source web development framework for Vue.js.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00091 Published 2026-06-12 Fixed in 3.21.6, 4.4.6 CWE-349

Open these records in search →