Nuxt cross-site scripting vulnerability

Versions prior to Nuxt 4.6.0 contain a cross-site scripting vulnerability. This flaw arises because NuxtLink fails to properly handle user-supplied input containing ASCII C0 control characters. Without protocol validation, pages are treated as internal routes and their href attributes are passed ...