Nuxt security vulnerabilities
Developer framework / library. Public CVE monitoring for Nuxt. Vendor security advisories are linked on this page.
Built for Operators of this product.
28 public records · 0 security-fix timeline events. 5 published in the last 7 days. 25 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 0
- High 0
- Medium 8
- Low 3
2026-08-0511 issues2026-11-02
Known exploited
View all known exploitedNo records match this view.
Recently published
Browse catalog- Medium4.8Nuxt dev server exposes generated appSecret through Vite file servingCheck if you run itEPSS 0.21%Oct 27, 2026
- Medium6.5Nuxt: Dot segments in the request path bypass path checks and server route rules on page routesCheck if you run itEPSS 0.34%Oct 27, 2026
- Medium5.9Nuxt dev server arbitrary file read through client error reportsCheck if you run itEPSS 0.29%Oct 27, 2026
- Medium5.9Nuxt dev server exposes private runtime config through the Nitro dev bundleCheck if you run itEPSS 0.35%Oct 27, 2026
- Medium6.3Nuxt: Server-side route rules ( , , , ) are skipped for case-variant paths when routing is case-insensitiveCheck if you run itEPSS 0.42%Oct 16, 2026
- Medium5.4Nuxt server islands render input without sanitisationCheck if you run itEPSS 0.22%Oct 16, 2026
- Medium6.5Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass on dynamic and catch-all routesCheck if you run itEPSS 0.36%Oct 16, 2026
- Medium6.9Nuxt OG Image generates OG Images with Vue templates in Nuxt.Check if you run itEPSS 0.19%Oct 15, 2026
- High7.5Unauthenticated out-of-memory crash via unbounded v-for expansion in Nuxt island renderingCheck if you run itEPSS 0.91%Jul 27, 2026
- High7.5Unauthenticated CPU exhaustion parsing and hashing the Nuxt island endpoint body before hash validationCheck if you run itEPSS 0.74%Jul 27, 2026