Nitrojs vulnerabilities

Products

• Nitropack 4
• Nitro 2

Newest

• nitro, nitrojs nitropack +1 more Nitro: Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules CVE-2026-44372 Fix available 5.3 MediumMay 6, 2026
• nitro, nitrojs nitropack +1 more Nitro: Proxy scope bypass via percent-encoded path traversal in `routeRules` CVE-2026-44373 Fix available 5.3 MediumMay 6, 2026
• nitrojs nitropack WordPress NitroPack plugin <= 1.19.3 - Broken Access Control vulnerability CVE-2026-39669 5.3 MediumApril 8, 2026
• nitrojs nitropack WordPress NitroPack plugin <= 1.16.7 - Unauthenticated Arbitrary Shortcode Execution vulnerability CVE-2024-43922 4.8 MediumAugust 29, 2024