What’s Vulnerable › Products

Nuxt/Webpack-Builder vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Nuxt/Webpack-Builder version is affected

Latest Nuxt/Webpack-Builder vulnerabilities

• CVE-2026-49993 — @nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g) (CVSS 5.7)
• CVE-2026-45670 — Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99) (CVSS 5.4)