Nuxt Ui vulnerabilities

• nuxt ui Nuxt UI: UAuthForm / UForm SSR markup omits `method`, leaking credentials via GET if submitted before hydration CVE-2026-123808 Fix available 5.3 MediumJuly 2, 2026
• @clerk nuxt, nuxt nuxt\/rspack-builder, nuxt\/webpack-builder +2 more @nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g) CVE-2026-49993 Fix available 5.9 MediumJune 12, 2026
• @clerk nuxt, nuxt nuxt\/rspack-builder, nuxt\/webpack-builder +2 more Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99) CVE-2026-45670 Fix available 5.9 MediumMay 19, 2026