Vulnerabilities
Last updated 9 minutes ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
Nuxt: Incomplete fix for GHSA-9v7c-q64q-vv33: a leading `//` in the request path bypasses `server/middleware` path checks and server route rules on page routes | Medium Risk 6.5 | 1 hour ago | 1 hour ago |
|
|
Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes | Medium Risk 6.5 | 13 days ago | 13 days ago |
|
|
Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive | Medium Risk 6.0 | 22 days ago | 22 days ago |
|
|
Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning | Medium Risk 5.4 | 5 months ago | 4 months ago |
|
|
Nuxt's route middleware is not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*` | Medium Risk 5.3 | 5 months ago | 4 months ago |
Page 1