nuxt vulnerabilities (TuxCare)
27 vulnerabilities.
-
nuxtTuxCare Nuxt server islands render `useHeadSafe` input without sanitisation 5.4 Medium -
nuxtTuxCare Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive 6.3 Medium -
nuxtTuxCare Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes 6.5 Medium -
nuxtTuxCare Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled 2.3 Low -
nuxtTuxCare Nuxt: Unauthenticated CPU exhaustion parsing and hashing the Nuxt island endpoint body before hash validation 7.5 High -
nuxtTuxCare Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props 8.1 High -
nuxtTuxCare Nuxt: Unauthorized Component Instantiation via Server Island Props 4.8 Medium -
nuxtTuxCare Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering 7.5 High -
nuxtTuxCare Nuxt - Cross-Site Scripting via NoScript Component Slot Content 2.3 Low -
nuxtTuxCare Nuxt - Server-Side Open Redirect via Path-Normalization Bypass in navigateTo 5.3 Medium -
nuxtTuxCare Nuxt - Arbitrary File Read via World-Connectable vite-node IPC Socket on Linux 6.8 Medium -
nuxtTuxCare Nuxt: Reflected XSS in `<NuxtLink>` via unsanitised `javascript:` or `data:` URL 5.1 Medium -
nuxtTuxCare Nuxt: Route-rule middleware bypass via case-sensitivity mismatch between vue-router and the routeRules matcher 8.8 High -
nuxtTuxCare @nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g) 5.9 Medium -
nuxtTuxCare Nuxt: Route middleware not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*` 6.3 Medium -
nuxtTuxCare Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning 2.3 Low -
nuxtTuxCare Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99) 5.9 Medium -
nuxtTuxCare Nuxt: Reflected XSS in `navigateTo()` external redirect 5.3 Medium -
nuxtTuxCare PostCSS has XSS via Unescaped </style> in its CSS Stringify Output 6.1 Medium -
nuxtTuxCare fast-xml-parser has RangeError DoS Numeric Entities Bug 7.5 High -
nuxtTuxCare vite allows server.fs.deny bypass via backslash on Windows 6.0 Medium -
nuxtTuxCare Nuxt Client-Side Path Traversal in Nuxt Island Payload Revival 3.1 Low -
nuxtTuxCare Nuxt allows DOS via cache poisoning with payload rendering response 7.5 High -
nuxtTuxCare Opening a malicious website while running a Nuxt dev server could allow read-only access to code 5.3 Medium -
nuxtTuxCare Opening a malicious website while running a Nuxt dev server could allow read-only access to code 5.3 Medium -
nuxtTuxCare Remote code execution via the browser when running the test locally in nuxt 8.8 High -
nuxtTuxCare Cross-site Scripting (XSS) in navigateTo if used after SSR in nuxt 6.3 Medium