Skip to content
Threat Feed
Subscribe

Vendor

Nuxt

2 briefs RSS
low advisory

Unauthenticated Denial of Service in Nuxt SSR

An unauthenticated remote denial-of-service vulnerability (CVE-2026-71314) in Nuxt allows attackers to trigger memory exhaustion via unbounded 'v-for' iteration within server-side rendered components.

Nuxt 3 +1
1c
high advisory

Nuxt 4.x Runtime Payload Cache Disclosure

A vulnerability in Nuxt 4.4.0 through 4.5.0 causes sensitive SSR data in the payload cache to be disclosed to unauthorized users due to an insufficient cache key implementation.

Nuxt +4 remote-code-execution template-injection cve-2026-71320
2r 3t updated