HIGH8.8CVE-2024-34344Nuxt vulnerable to remote code execution via the browser when running the test locally >= 3.4.0, < 3.12.4
>= 3.4.0, < 3.4.3
HIGH7.5CVE-2025-27415Nuxt allows DOS via cache poisoning with payload rendering response >= 3.0.0, < 3.16.0
MEDIUM6.3nuxt vulnerable to Cross-site Scripting in navigateTo if used after SSR
from 0, < 3.12.4
MEDIUM5.5Nuxt dev server vite-node IPC socket is world-connectable on Linux
>= 4.0.0, < 4.4.7
MEDIUM5.4Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning
>= 3.1.0, < 3.21.6
MEDIUM5.4Nuxt: Reflected XSS in `navigateTo()` external redirect
>= 3.4.3, < 3.21.6
MEDIUM5.3Nuxt's route middleware is not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`
>= 3.11.0, < 3.21.6
LOW3.1Nuxt has Client-Side Path Traversal in Nuxt Island Payload Revival
>= 3.6.0, < 3.19.0
—Cross-site scripting via <NoScript> slot content in Nuxt's head components
>= 4.0.0, < 4.4.7
—Nuxt: Reflected XSS in `<NuxtLink>` via unsanitised `javascript:` or `data:` URL
>= 4.0.0, < 4.4.7
—Nuxt: Route-rule middleware bypass via case-sensitivity mismatch between vue-router and the routeRules matcher
>= 4.0.0, < 4.4.7
—Nuxt: URL-handling weaknesses in `navigateTo` and `reloadNuxtApp`: SSR open redirect, client-side script execution via the `open` option, and protocol-relative bypass in `reloadNuxtApp`
>= 4.0.0, < 4.4.7