Launch Week Day 1: Announcing Security Design Review
Start for Free
npm

nuxt

View on npm registry
8 Total advisories
8 Vulnerabilities
0 Malware

Vulnerabilities

UNKNOWN
npm

CVE-2026-46342

Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning
UNKNOWN
npm

CVE-2026-47200

Nuxt's route middleware is not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`
UNKNOWN
npm

CVE-2026-45669

Nuxt: Reflected XSS in `navigateTo()` external redirect
LOW 3.1
npm

CVE-2025-59414

Nuxt has Client-Side Path Traversal in Nuxt Island Payload Revival
MEDIUM 6.3
npm

CVE-2024-34343

nuxt vulnerable to Cross-site Scripting in navigateTo if used after SSR
HIGH 7.5
npm

CVE-2025-27415

Nuxt allows DOS via cache poisoning with payload rendering response
HIGH 8.8
npm

CVE-2024-34344

Nuxt vulnerable to remote code execution via the browser when running the test locally
HIGH 8.1
npm

CVE-2023-3224

nuxt Code Injection vulnerability

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes