Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

6 matching records.

1. 35
   CVE NVD 4h ago

   Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components.

   Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components. From 3.0.0 until 3.15.2, the unauthenticated POST /__nuxt_content/:collection/query endpoint accepts an attacker-controlled sql…

   CVSS 7.5 Fix available CVE-2026-102650 Nuxt Database
2. 13
   CVE NVD 8d ago

   Nuxt is an open-source web development framework for Vue.js.

   Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores a generated appSecret in <buildDir>/app-secret, by default .nuxt/app-secret, within a directory allowed by Vite's server.fs…

   CVSS 4.8 Fix available CVE-2026-119201 Nuxt Developer platform
3. 13
   CVE NVD 8d ago

   Nuxt is an open-source web development framework for Vue.js.

   Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, Nuxt resolves literal or percent-encoded dot segments before rendering a page while Nitro routing, server/middleware checks, and server route…

   CVSS 6.5 Fix available CVE-2026-119200 Nuxt @Nuxt Developer platform
4. 13
   CVE NVD 8d ago

   Nuxt is an open-source web development framework for Vue.js.

   Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the Nuxt development server can expose the Nitro 2 development bundle at <buildDir>/dev/index.mjs through Vite file serving when the server is…

   CVSS 5.9 Fix available CVE-2026-119199 Nuxt Developer platform
5. 13
   CVE NVD 8d ago

   Nuxt is an open-source web development framework for Vue.js.

   Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, a client with TCP access to an exposed Nuxt development server can send a nuxt:dev:client-error event over the HMR socket with an absolute file…

   CVSS 5.9 Fix available CVE-2026-119198 Nuxt Developer platform
6. 7
   CVE NVD 4d ago

   Nuxt from 4.6.0 before 4.6.2 contains a route parameter confusion vulnerability in getRouterParam and getRouterParams that lets attackers return a…

   Nuxt from 4.6.0 before 4.6.2 contains a route parameter confusion vulnerability in getRouterParam and getRouterParams that lets attackers return a parameter value different from the one h3 matched by sending paths containing an…

   CVSS 3.7 CVE-2026-120309 Nuxt Developer platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Nuxt&limit=100. RSS for this section: feed.xml.