nuxt kayıtları
nuxt üreticisine ait 25 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %88
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')2
- CWE-749 Exposed Dangerous Method or Function2
- CWE-400 Uncontrolled Resource Consumption1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
25 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
57Planlayın | CVE-2023-3224İstismar yok | Code Injection in nuxt/nuxtnuxt · nuxt · CWE-94 | Kritik9,8 | — | %58,6 | 13 Haz 2023 |
35İzleyin | CVE-2024-23657İstismar yok | Path Traversal: '../filedir' in Nuxt Devtoolsnuxt · nuxt · CWE-22 | Yüksek8,8 | — | %1,2 | 5 Ağu 2024 |
35İzleyin | CVE-2024-34344İstismar yok | Remote code execution via the browser when running the test locally in nuxtnuxt · nuxt · CWE-94 | Yüksek8,8 | — | %0,8 | 5 Ağu 2024 |
35İzleyin | CVE-2026-53721İstismar yok | Nuxt: Route-rule middleware bypass via case-sensitivity mismatch between vue-router and the routeRules matchernuxt · nuxt · CWE-178 | Yüksek8,8 | — | %0,5 | 12 Haz 2026 |
30İzleyin | CVE-2024-42352İstismar yok | Server-Side Request Forgery (SSRF) in nuxt-iconnuxt · nuxt · CWE-918 | Yüksek7,5 | — | %0,6 | 5 Ağu 2024 |
30İzleyin | CVE-2025-27415Kavram kanıtı | Nuxt allows DOS via cache poisoning with payload rendering responsenuxt · nuxt · CWE-349 | Yüksek7,5 | — | %0,4 | 19 Mar 2025 |
27İzleyin | CVE-2026-34404İstismar yok | Nuxt OG Image vulnerable to DoS via image generationnuxt · og image · CWE-400 | Orta6,9 | — | %0,5 | 31 Mar 2026 |
27İzleyin | CVE-2026-56301İstismar yok | Nuxt - Arbitrary File Read via World-Connectable vite-node IPC Socket on Linuxnuxt · nuxt · CWE-276 | Orta6,8 | — | %0,1 | 23 Haz 2026 |
25İzleyin | CVE-2026-47200İstismar yok | Nuxt: Route middleware not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`nuxt · nuxt · CWE-284 | Orta6,3 | — | %0,3 | 12 Haz 2026 |
24İzleyin | CVE-2023-0878İstismar yok | Cross-site Scripting (XSS) - Generic in nuxt/frameworknuxt · nuxt · CWE-79 | Orta6,1 | — | %0,5 | 16 Şub 2023 |
24İzleyin | CVE-2022-4413İstismar yok | Cross-site Scripting (XSS) - Reflected in nuxt/frameworknuxt · framework · CWE-79 | Orta6,1 | — | %0,5 | 11 Ara 2022 |
24İzleyin | CVE-2022-4414İstismar yok | Cross-site Scripting (XSS) - DOM in nuxt/frameworknuxt · framework · CWE-79 | Orta6,1 | — | %0,5 | 11 Ara 2022 |
24İzleyin | CVE-2024-34343İstismar yok | Cross-site Scripting (XSS) in navigateTo if used after SSR in nuxtnuxt · nuxt · CWE-79 | Orta6,1 | — | %0,4 | 5 Ağu 2024 |
24İzleyin | CVE-2026-34405İstismar yok | Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributesnuxt · og image · CWE-79 | Orta6,1 | — | %0,3 | 31 Mar 2026 |
24İzleyin | CVE-2025-52662İstismar yok | A vulnerability in Nuxt DevTools has been fixed in version **2.6.4***.nuxt · devtools · CWE-79 | Orta6,1 | — | %0,2 | 6 Kas 2025 |
23İzleyin | CVE-2026-45670İstismar yok | Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99)nuxt · nuxt\/rspack-builder · CWE-749 | Orta5,9 | — | %0,4 | 12 Haz 2026 |
23İzleyin | CVE-2026-49993İstismar yok | @nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix fornuxt · nuxt\/rspack-builder · CWE-749 | Orta5,9 | — | %0,3 | 12 Haz 2026 |
21İzleyin | CVE-2026-56698İstismar yok | Nuxt - Cross-Site Scripting via navigateTo open Optionnuxt · nuxt · CWE-79 | Orta5,3 | — | %0,4 | 22 Haz 2026 |
21İzleyin | CVE-2026-56326İstismar yok | Nuxt - Server-Side Open Redirect via Path-Normalization Bypass in navigateTonuxt · nuxt · CWE-601 | Orta5,3 | — | %0,4 | 22 Haz 2026 |
21İzleyin | CVE-2026-56697İstismar yok | Nuxt - Open Redirect via Protocol-Relative Paths in reloadNuxtAppnuxt · nuxt · CWE-601 | Orta5,3 | — | %0,3 | 22 Haz 2026 |
21İzleyin | CVE-2026-45669İstismar yok | Nuxt: Reflected XSS in `navigateTo()` external redirectnuxt · nuxt · CWE-83 | Orta5,3 | — | %0,3 | 12 Haz 2026 |
20İzleyin | CVE-2026-53722İstismar yok | Nuxt: Reflected XSS in `<NuxtLink>` via unsanitised `javascript:` or `data:` URLnuxt · nuxt · CWE-79 | Orta5,1 | — | %0,3 | 12 Haz 2026 |
12İzleyin | CVE-2025-59414İstismar yok | Nuxt Client-Side Path Traversal in Nuxt Island Payload Revivalnuxt · nuxt · CWE-22 | Düşük3,1 | — | %0,4 | 17 Eyl 2025 |
9İzleyin | CVE-2026-56317İstismar yok | Nuxt - Cross-Site Scripting via NoScript Component Slot Contentnuxt · nuxt · CWE-79 | Düşük2,3 | — | %0,3 | 20 Haz 2026 |
9İzleyin | CVE-2026-46342İstismar yok | Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoningnuxt · nuxt · CWE-79 | Düşük2,3 | — | %0,1 | 12 Haz 2026 |
- CVE-2023-322457Planlayın
Code Injection in nuxt/nuxt
KritikCVSS 9,8İstismar yokEPSS %59nuxt · nuxt13 Haz 2023
- CVE-2024-2365735İzleyin
Path Traversal: '../filedir' in Nuxt Devtools
YüksekCVSS 8,8İstismar yokEPSS %1nuxt · nuxt5 Ağu 2024
- CVE-2024-3434435İzleyin
Remote code execution via the browser when running the test locally in nuxt
YüksekCVSS 8,8İstismar yokEPSS %1nuxt · nuxt5 Ağu 2024
- CVE-2026-5372135İzleyin
Nuxt: Route-rule middleware bypass via case-sensitivity mismatch between vue-router and the routeRules matcher
YüksekCVSS 8,8İstismar yokEPSS %1nuxt · nuxt12 Haz 2026
- CVE-2024-4235230İzleyin
Server-Side Request Forgery (SSRF) in nuxt-icon
YüksekCVSS 7,5İstismar yokEPSS %1nuxt · nuxt5 Ağu 2024
- CVE-2025-2741530İzleyin
Nuxt allows DOS via cache poisoning with payload rendering response
YüksekCVSS 7,5Kavram kanıtıEPSS %0nuxt · nuxt19 Mar 2025
- CVE-2026-3440427İzleyin
Nuxt OG Image vulnerable to DoS via image generation
OrtaCVSS 6,9İstismar yokEPSS %0nuxt · og image31 Mar 2026
- CVE-2026-5630127İzleyin
Nuxt - Arbitrary File Read via World-Connectable vite-node IPC Socket on Linux
OrtaCVSS 6,8İstismar yokEPSS %0nuxt · nuxt23 Haz 2026
- CVE-2026-4720025İzleyin
Nuxt: Route middleware not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`
OrtaCVSS 6,3İstismar yokEPSS %0nuxt · nuxt12 Haz 2026
- CVE-2023-087824İzleyin
Cross-site Scripting (XSS) - Generic in nuxt/framework
OrtaCVSS 6,1İstismar yokEPSS %1nuxt · nuxt16 Şub 2023
- CVE-2022-441324İzleyin
Cross-site Scripting (XSS) - Reflected in nuxt/framework
OrtaCVSS 6,1İstismar yokEPSS %1nuxt · framework11 Ara 2022
- CVE-2022-441424İzleyin
Cross-site Scripting (XSS) - DOM in nuxt/framework
OrtaCVSS 6,1İstismar yokEPSS %0nuxt · framework11 Ara 2022
- CVE-2024-3434324İzleyin
Cross-site Scripting (XSS) in navigateTo if used after SSR in nuxt
OrtaCVSS 6,1İstismar yokEPSS %0nuxt · nuxt5 Ağu 2024
- CVE-2026-3440524İzleyin
Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes
OrtaCVSS 6,1İstismar yokEPSS %0nuxt · og image31 Mar 2026
- CVE-2025-5266224İzleyin
A vulnerability in Nuxt DevTools has been fixed in version **2.6.4***.
OrtaCVSS 6,1İstismar yokEPSS %0nuxt · devtools6 Kas 2025
- CVE-2026-4567023İzleyin
Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99)
OrtaCVSS 5,9İstismar yokEPSS %0nuxt · nuxt\/rspack-builder12 Haz 2026
- CVE-2026-4999323İzleyin
@nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for
OrtaCVSS 5,9İstismar yokEPSS %0nuxt · nuxt\/rspack-builder12 Haz 2026
- CVE-2026-5669821İzleyin
Nuxt - Cross-Site Scripting via navigateTo open Option
OrtaCVSS 5,3İstismar yokEPSS %0nuxt · nuxt22 Haz 2026
- CVE-2026-5632621İzleyin
Nuxt - Server-Side Open Redirect via Path-Normalization Bypass in navigateTo
OrtaCVSS 5,3İstismar yokEPSS %0nuxt · nuxt22 Haz 2026
- CVE-2026-5669721İzleyin
Nuxt - Open Redirect via Protocol-Relative Paths in reloadNuxtApp
OrtaCVSS 5,3İstismar yokEPSS %0nuxt · nuxt22 Haz 2026
- CVE-2026-4566921İzleyin
Nuxt: Reflected XSS in `navigateTo()` external redirect
OrtaCVSS 5,3İstismar yokEPSS %0nuxt · nuxt12 Haz 2026
- CVE-2026-5372220İzleyin
Nuxt: Reflected XSS in `<NuxtLink>` via unsanitised `javascript:` or `data:` URL
OrtaCVSS 5,1İstismar yokEPSS %0nuxt · nuxt12 Haz 2026
- CVE-2025-5941412İzleyin
Nuxt Client-Side Path Traversal in Nuxt Island Payload Revival
DüşükCVSS 3,1İstismar yokEPSS %0nuxt · nuxt17 Eyl 2025
- CVE-2026-563179İzleyin
Nuxt - Cross-Site Scripting via NoScript Component Slot Content
DüşükCVSS 2,3İstismar yokEPSS %0nuxt · nuxt20 Haz 2026
- CVE-2026-463429İzleyin
Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning
DüşükCVSS 2,3İstismar yokEPSS %0nuxt · nuxt12 Haz 2026