What’s Vulnerable › Products

Nuxt/Nitro-Server vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Nuxt/Nitro-Server version is affected

Latest Nuxt/Nitro-Server vulnerabilities

• CVE-2026-47200 — Nuxt: Route middleware not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*` (CVSS 5.3)
• CVE-2026-46342 — Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning (CVSS 5.4)