nuxt
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 28 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 11, 2022 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Nuxt before 4.5.1 Information Disclosure via Chrome DevTools
Nuxt - Arbitrary File Read via World-Connectable vite-node IPC Socket on Linux
Nuxt - Open Redirect via Protocol-Relative Paths in reloadNuxtApp
Nuxt - Cross-Site Scripting via navigateTo open Option
Nuxt - Server-Side Open Redirect via Path-Normalization Bypass in navigateTo
Nuxt - Cross-Site Scripting via NoScript Component Slot Content
Nuxt: Reflected XSS in `<NuxtLink>` via unsanitised `javascript:` or `data:` URL
Nuxt: Route-rule middleware bypass via case-sensitivity mismatch between vue-router and the routeRules matcher
@nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g)
Nuxt: Route middleware not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`
Monitor nuxt in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.