CVE-2026-72744-poc

CVE-2026-72744: Nuxt Chrome DevTools endpoint information disclosure PoC Japanese version Overview This repository reproduces CVE-2026-72744 , an information disclosure in Nuxt's development-only Chrome DevTools workspace endpoint. The vulnerable server uses attacker-controlled HTTP headers,...

GHSA-XXRH-5HGG-GJ4H Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API

Summary The POST /nuxtcontent/:collection/query endpoint in @nuxt/content accepts an attacker-controlled sql field from the HTTP request body and executes it against a local SQLite database after passing it through an insufficient validator assertSafeQuery. The validator only blocks a small set o...

EUVD-2026-118389

Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API...

Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API

Summary The POST /nuxtcontent/:collection/query endpoint in @nuxt/content accepts an attacker-controlled sql field from the HTTP request body and executes it against a local SQLite database after passing it through an insufficient validator assertSafeQuery. The validator only blocks a small set o...

CVE-2026-123808

Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS. Prior to 4.8.1, the server-rendered form element produced by UForm in src/runtime/components/Form.vue omits the method and action attributes and relies solely on the hydrated @submit.prevent handler to stop native...

CVE-2026-123808 Nuxt UI: UAuthForm / UForm SSR markup omits `method`, leaking credentials via GET if submitted before hydration

Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS. Prior to 4.8.1, the server-rendered form element produced by UForm in src/runtime/components/Form.vue omits the method and action attributes and relies solely on the hydrated @submit.prevent handler to stop native...

CVE-2026-123808 Nuxt UI: UAuthForm / UForm SSR markup omits `method`, leaking credentials via GET if submitted before hydration

Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS. Prior to 4.8.1, the server-rendered form element produced by UForm in src/runtime/components/Form.vue omits the method and action attributes and relies solely on the hydrated @submit.prevent handler to stop native...

CVE-2026-123808

The Nuxt UI Vue UI library (prior to version 4.8.1 ) contains a vulnerability where the server-rendered form element produced by UForm (located in src/runtime/components/Form.vue) omits the method and action attributes. The component relies entirely on a hydrated @submit.prevent handler to block ...

EUVD-2026-120439

Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS. Prior to 4.8.1, the server-rendered form element produced by UForm in src/runtime/components/Form.vue omits the method and action attributes and relies solely on the hydrated @submit.prevent handler to stop native...

PT-2026-141121

Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS. Prior to 4.8.1, the server-rendered form element produced by UForm in src/runtime/components/Form.vue omits the method and action attributes and relies solely on the hydrated @submit.prevent handler to stop native...

CVE-2026-123808: nuxt ui: Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS

Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS. Prior to 4.8.1, the server-rendered form element produced by UForm in src/runtime/components/Form.vue omits the method and action attributes and relies solely on the hydrated @submit.prevent handler to stop native...

CVE-2026-102650

Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components. From 3.0.0 until 3.15.2, the unauthenticated POST /nuxtcontent/:collection/query endpoint accepts an attacker-controlled sql field in src/runtime/api/query.post.ts and permits expensive SQLite...

CVE-2026-102650 Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API

Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components. From 3.0.0 until 3.15.2, the unauthenticated POST /nuxtcontent/:collection/query endpoint accepts an attacker-controlled sql field in src/runtime/api/query.post.ts and permits expensive SQLite...

CVE-2026-102650 Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API

Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components. From 3.0.0 until 3.15.2, the unauthenticated POST /nuxtcontent/:collection/query endpoint accepts an attacker-controlled sql field in src/runtime/api/query.post.ts and permits expensive SQLite...

CVE-2026-102650

Nuxt Content, a file-based CMS for Nuxt applications, is vulnerable to an unauthenticated Denial of Service (DoS) via the POST /__nuxt_content/:collection/query endpoint in versions 3.0.0 through 3.15.2 . The issue stems from a validation gap in src/runtime/internal/security.ts (specifically the ...

@abbele/core (>=0.0.1, <=0.0.10), @abbele/uikit (>=0.0.1, <=0.1.2) +15 more potentially affected by CVE-2026-102650 via @nuxt/content (>=3.1.0, <=3.15.0)

@nuxt/content NPM version =3.1.0, =0.0.1, =0.0.1, =1.0.29-beta.7, =1.0.29-beta.7, =0.0.1, =1.0.0, =1.1.11, =0.0.30, =0.0.1, =1.1.0, =1.0.0-alpha.6, =0.0.2, =5.0.0-pre.3, =5.2.6 and more Source cves: CVE-2026-102650 Source advisory: MEND:CVE-2026-102650...

CVE-2026-102650

Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components. From 3.0.0 until 3.15.2, the unauthenticated POST /nuxtcontent/:collection/query endpoint accepts an attacker-controlled sql field in src/runtime/api/query.post.ts and permits expensive SQLite...

CVE-2026-102650 Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API

Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components. From 3.0.0 until 3.15.2, the unauthenticated POST /nuxtcontent/:collection/query endpoint accepts an attacker-controlled sql field in src/runtime/api/query.post.ts and permits expensive SQLite...

CVE-2026-102527

A flaw was found in nuxt-og-image. An unauthenticated remote attacker can cause content spoofing by poisoning the application's image cache. Because dynamic image routes accept unsigned requests and generate predictable cache keys, an attacker can submit crafted parameters to overwrite legitimate...

CVE-2026-102650: nuxt content: Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components

Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components. From 3.0.0 until 3.15.2, the unauthenticated POST /nuxtcontent/:collection/query endpoint accepts an attacker-controlled sql field in src/runtime/api/query.post.ts and permits expensive SQLite...