Meet Corgea at Black Hat, BSides Las Vegas & DEF CON
Start for Free
npm

@nuxt/webpack-builder

View on npm registry
3 Total advisories
3 Vulnerabilities
0 Malware

Vulnerabilities

MEDIUM 5.4
npm

CVE-2026-45670

Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99)
UNKNOWN
npm

CVE-2026-49993

@nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g)
MEDIUM 5.3
npm

CVE-2025-24361

Opening a malicious website while running a Nuxt dev server could allow read-only access to code

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes