| CVE-2026-45669 |
medium |
— |
5.5 |
9d ago |
Nuxt: Reflected XSS in `navigateTo()` external redirect |
|
| CVE-2026-46342 |
low |
— |
2.5 |
8d ago |
Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning |
|
| CVE-2025-59414 |
unknown |
— |
— |
8mo ago |
Nuxt has Client-Side Path Traversal in Nuxt Island Payload Revival |
|
| CVE-2025-27415 |
unknown |
— |
— |
1y ago |
Nuxt allows DOS via cache poisoning with payload rendering response |
|
| CVE-2024-34344 |
unknown |
— |
— |
2y ago |
Nuxt vulnerable to remote code execution via the browser when running the test locally |
|
| CVE-2024-34343 |
unknown |
— |
— |
2y ago |
nuxt vulnerable to Cross-site Scripting in navigateTo if used after SSR |
|
| CVE-2023-3224 |
unknown |
— |
— |
3y ago |
nuxt Code Injection vulnerability |
|