NU
Product
nuxt
by nuxt · last CVE Oct 29, 2026
37
CVEs
0
On KEV
9.8
Max CVSS
8
New 30D
Severity mix
Critical 1High 10Medium 24Low 2
Watch

Add nuxt to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-59414
3.1
0%
Sep 17
Nuxt Client-Side Path Traversal in Nuxt Island Payload Revival
Affected: >= 3.6.0 < 3.19.0; >= 4.0.0 < 4.1.0
CVE-2026-114130
2.3
0%
Oct 21
Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled
Affected: < 4.6.0
Showing 2