Arbitrary Code Injection

Overview org.webjars.npm:nuxt is a Affected versions of this package are vulnerable to Arbitrary Code Injection via the /nuxtisland/ endpoint when vue.runtimeCompiler is enabled and a server island component forwards attacker-controlled props into Vue's dynamic component resolution. An attacker c...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the /nuxtisland/ endpoint when vue.runtimeCompiler is enabled and a server island component forwards attacker-controlled props into Vue's dynamic component resolution. An attacker can execute arbitrary code ...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via the reloadNuxtApp function. An attacker can redirect users to attacker-controlled hosts by injecting protocol-relative paths such as //evil.com, potentially enabling phishing attacks or theft of OAuth authorization...

Cross-site scripting via <NoScript> slot content in Nuxt's head components

Impact Nuxt's globally registered component from @unhead/vue head components, re-exported by Nuxt wrote its default-slot content to the innerHTML of the head tag, bypassing the HTML escaping that interpolation normally applies in Vue templates. Applications that placed untrusted,...