Arbitrary Code Injection

Overview @nuxt/nitro-server is a Nitro server integration for Nuxt Affected versions of this package are vulnerable to Arbitrary Code Injection via the /nuxtisland/ endpoint when vue.runtimeCompiler is enabled and a server island component forwards attacker-controlled props into Vue's dynamic...