Vulnerabilities in Nuxt
42 resultsCVE-2025-59414LOWNuxt Client-Side Path Traversal in Nuxt Island Payload RevivalEPSS 0.4%CVE-2026-114131MEDIUMNuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routesEPSS 0.4%CVE-2026-56326MEDIUMNuxt - Server-Side Open Redirect via Path-Normalization Bypass in navigateToEPSS 0.4%CVE-2026-119199MEDIUMNuxt dev server exposes private runtime config through the Nitro dev bundleEPSS 0.4%CVE-2026-102650HIGHNuxt Content: Unauthenticated SQLite Function DoS via Content Query APIEPSS 0.4%CVE-2025-24361MEDIUMOpening a malicious website while running a Nuxt dev server could allow read-only access to codeEPSS 0.3%CVE-2026-56317LOWNuxt - Cross-Site Scripting via NoScript Component Slot ContentEPSS 0.3%CVE-2026-119200MEDIUMNuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routesEPSS 0.3%CVE-2026-56697MEDIUMNuxt - Open Redirect via Protocol-Relative Paths in reloadNuxtAppEPSS 0.3%CVE-2026-71318MEDIUMNuxt: Unauthorized Component Instantiation via Server Island PropsEPSS 0.3%CVE-2026-53722MEDIUMNuxt: Reflected XSS in `<NuxtLink>` via unsanitised `javascript:` or `data:` URLEPSS 0.3%CVE-2026-119198MEDIUMNuxt dev server arbitrary file read through client error reportsEPSS 0.3%CVE-2026-49993MEDIUM@nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g)EPSS 0.3%CVE-2026-47200MEDIUMNuxt: Route middleware not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`EPSS 0.2%CVE-2026-120309MEDIUMNuxt 4.6.0 before 4.6.2 Route Param Confusion via getRouterParamEPSS 0.2%CVE-2026-114133MEDIUMNuxt server islands render `useHeadSafe` input without sanitisationEPSS 0.2%CVE-2026-45670MEDIUMNuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99)EPSS 0.2%CVE-2026-119201MEDIUMNuxt dev server exposes generated appSecret through Vite file servingEPSS 0.2%CVE-2026-72744MEDIUMNuxt before 4.5.1 Information Disclosure via Chrome DevToolsEPSS 0.2%CVE-2026-45669MEDIUMNuxt: Reflected XSS in `navigateTo()` external redirectEPSS 0.2%