@nuxt/nitro-server vulnerabilities (npm)
4 vulnerabilities.
-
@nuxt/nitro-servernpm Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes 6.5 Medium -
@nuxt/nitro-servernpm Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive 6.3 Medium -
@nuxt/nitro-servernpm Nuxt: Route middleware not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*` 6.3 Medium -
@nuxt/nitro-servernpm Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning 2.3 Low