NI
Product
nitro-server
by @nuxt · last CVE Oct 29, 2026
1
CVEs
0
On KEV
6.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add nitro-server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-119200
New
6.5–Oct 29
Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes
Affected: >= 4.6.0, < 4.6.3
Showing 1