nuxt

Records45All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

nuxt records in CISA KEV

No nuxt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Nuxt 18 records HIGH Framework 2 records HIGH Nuxt/nitro-server 2 records HIGH Nuxt/rspack-builder 2 records MEDIUM Nuxt/webpack-builder 2 records MEDIUM Og Image 2 records HIGH Devtools 1 record LOW

Records

2 records in Nuxt/rspack-builder · all components

TI-2026-36824 CVE-2026-49993 · GHSA-x6qj-4h56-5rj5

@nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when…

MEDIUM 60

Nuxt is an open-source web development framework for Vue.js.

CVSS 4.0MEDIUM 5.9 Adjacent network No auth User interaction EPSS 0.0028 Published 2026-06-12 Fixed in 3.21.7, 4.4.7 CWE-749

TI-2026-33412 CVE-2026-45670 · GHSA-6m52-m754-pw2g

Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99)

MEDIUM 60

Nuxt is an open-source web development framework for Vue.js.

CVSS 4.0MEDIUM 5.9 Adjacent network No auth User interaction EPSS 0.00205 Published 2026-06-12 Fixed in 3.21.6, 4.4.6 CWE-749

Open these records in search →