p PatchFirst

PatchFirst · Latest vulnerabilities

nuxt vulnerabilities · Page 2

Vulnerabilities published for nuxt in the last 30 days: 4. Listed in the KEV catalogue: 0.

RSS ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 25

  1. CVE-2025-59414

    Low · CVSS 3.1EPSS 0.37%Fix available

    Nuxt Client-Side Path Traversal in Nuxt Island Payload Revival

    Nuxt is an open-source web development framework for Vue.js. Prior to 3.19.0 and 4.1.0, A client-side path traversal vulnerability in Nuxt's Island payload revival mechanism allowed attackers to manipulate client-side requests to different endpoints within the same application domain when specific prerendering conditions are met. The vulnerability occurs in the client-side payload revival process (revive-payload.client.ts) where Nuxt Islands are automatically fetched when encountering serialized __nuxt_island objects. During prerendering, if an API endpoint returns user-controlled data containing a crafted __nuxt_island object, he data gets s

    nuxt nuxtNode.js
    • Update to 3.19.0
    • Update to 4.1.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2025-27415

    High · CVSS 7.5EPSS 0.39%Fix available

    Nuxt allows DOS via cache poisoning with payload rendering response

    Nuxt is an open-source web development framework for Vue.js. Prior to 3.16.0, by sending a crafted HTTP request to a server behind an CDN, it is possible in some circumstances to poison the CDN cache and highly impacts the availability of a site. It is possible to craft a request, such as https://mysite.com/?/_payload.json which will be rendered as JSON. If the CDN in front of a Nuxt site ignores the query string when determining whether to cache a route, then this JSON response could be served to future visitors to the site. An attacker can perform this attack to a vulnerable site in order to make a site unavailable indefinitely. It is also

    nuxtNode.js
    • Update to 3.16.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  3. CVE-2024-34344

    High · CVSS 8.8EPSS 0.83%Fix available

    Remote code execution via the browser when running the test locally in nuxt

    Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. Due to the insufficient validation of the `path` parameter in the NuxtTestComponentWrapper, an attacker can execute arbitrary JavaScript on the server side, which allows them to execute arbitrary commands. Users who open a malicious web page in the browser while running the test locally are affected by this vulnerability, which results in the remote code execution from the malicious web page. Since web pages can send requests to arbitrary addresses, a malicious web page can repeatedly try to exploit this vulnerability, which then triggers

    nuxtNode.js
    • Update to 3.12.4
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  4. CVE-2024-34343

    Medium · CVSS 6.3EPSS 0.44%Fix available

    Cross-site Scripting (XSS) in navigateTo if used after SSR in nuxt

    Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. The `navigateTo` function attempts to blockthe `javascript:` protocol, but does not correctly use API's provided by `unjs/ufo`. This library also contains parsing discrepancies. The function first tests to see if the specified URL has a protocol. This uses the unjs/ufo package for URL parsing. This function works effectively, and returns true for a javascript: protocol. After this, the URL is parsed using the parseURL function. This function will refuse to parse poorly formatted URLs. Parsing javascript:alert(1) returns null/"" for all va

    nuxtNode.js
    • Update to 3.12.4
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →