CVE-2026-128075

Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.4, Nuxt wraps non-HTTP errors thrown during server rendering with createError and incorrectly treats the result as an error deliberately exposed by the application. In production, the error page payload NUXTDATA and...

CVE-2026-128075

The Nuxt web development framework (versions 3.0.0 until 4.6.4 ) contains a vulnerability where non-HTTP errors thrown during server rendering are incorrectly handled. The framework wraps these errors with createError and treats them as intentionally exposed by the application. In production, thi...

EUVD-2026-125626

Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.4, Nuxt wraps non-HTTP errors thrown during server rendering with createError and incorrectly treats the result as an error deliberately exposed by the application. In production, the error page payload NUXTDATA and...

CVE-2026-128075 Nuxt exposes the message and data of unhandled errors thrown during server rendering

Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.4, Nuxt wraps non-HTTP errors thrown during server rendering with createError and incorrectly treats the result as an error deliberately exposed by the application. In production, the error page payload NUXTDATA and...