CVE-2023-49799

nuxt-api-party is an open source module to proxy API requests. nuxt-api-party attempts to check if the user has passed an absolute URL to prevent the aforementioned attack. This has been recently changed to use the regular expression ^https?://, however this regular expression can be bypassed by ...

CVE-2023-49800

nuxt-api-party is an open source module to proxy API requests. The library allows the user to send many options directly to ofetch. There is no filter on which options are available. We can abuse the retry logic to cause the server to crash from a stack overflow. fetchOptions are obtained directl...

CVE-2024-34344

Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. Due to the insufficient validation of the path parameter in the NuxtTestComponentWrapper, an attacker can execute arbitrary JavaScript on the server side, which allows them to execute arbitrar...

EUVD-2025-199472

Malicious code in @oku-ui/primitives-nuxt npm...

EUVD-2025-199451

Malicious code in @pergel/nuxt npm...

MAL-2025-191185 Malicious code in @alexcolls/nuxt-socket.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dee0cebdac319dea5d5f8c78c0d15431297789499f8e486729175fffb7c4f91 The package @alexcolls/nuxt-socket.io was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199478

Malicious code in @oku-ui/motion-nuxt npm...

EUVD-2025-199513

Malicious code in @alexcolls/nuxt-ux npm...

Malicious code in @oku-ui/motion-nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92b87caa59206174882fe75cd77964bc3f31b824958a07a22210e50eeb21ac9 The package @oku-ui/motion-nuxt was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191400 Malicious code in nuxt-keycloak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb088ab2b0e4b6991065c6bcdc57302ff545bb3fe2f2a73ec21fafeae1175f8 The package nuxt-keycloak was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-199499

Malicious code in @huntersofbook/core-nuxt npm...

EUVD-2025-199362

Malicious code in nuxt-keycloak npm...

EUVD-2025-199493

Malicious code in @livecms/nuxt-live-edit npm...

EUVD-2025-199514

Malicious code in @alexcolls/nuxt-socket.io npm...

Malicious code in @pergel/nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254d004d3481a4de85486f384ce71966afc1887442207235accfc350ceab39cc The package @pergel/nuxt was found to contain malicious code. Source: google-open-source-security...

Malicious code in @huntersofbook/core-nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55edac19ed06e3c91521ad4302f6089a2c2443807f93bf209a4e111a86a09b3a The package @huntersofbook/core-nuxt was found to contain malicious code. Source: google-open-source-security...

Malicious code in @alexcolls/nuxt-ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d0dc43ee3b9d8d19d3d6a710804c3ea65f07046818a98a58990901d8f88d77 The package @alexcolls/nuxt-ux was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191288 Malicious code in @pergel/nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254d004d3481a4de85486f384ce71966afc1887442207235accfc350ceab39cc The package @pergel/nuxt was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-199303

Malicious code in @lui-ui/lui-nuxt npm...

MAL-2025-191243 Malicious code in @lui-ui/lui-nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaeb0138ac2e77901a8360aeeeec1038e7da06fabc4c4726a6fb2060f8d01b5 The package @lui-ui/lui-nuxt was found to contain malicious code. Source: ghsa-malware 7914345d453dc4753973e462d6f8e4cbd4d25656c98b9a22f073c9fdddb715...