CVE-2025-27415

Nuxt is an open-source web development framework for Vue.js. Prior to 3.16.0, by sending a crafted HTTP request to a server behind an CDN, it is possible in some circumstances to poison the CDN cache and highly impacts the availability of a site. It is possible to craft a request, such as...

Acceptance of Extraneous Untrusted Data With Trusted Data

Overview org.webjars.npm:nuxt is a Affected versions of this package are vulnerable to Acceptance of Extraneous Untrusted Data With Trusted Data. An attacker can disrupt the availability of a site by sending a crafted HTTP request such as https://mysite.com/?/payload.json that results in a poison...

Nuxt 安全漏洞

Nuxt is a free open source framework from Nuxt Open Source. A security vulnerability exists in Nuxt versions prior to 3.16.0 that originates from a specially crafted HTTP request sent to a server behind a CDN, which may poison the CDN cache in some cases, severely impacting site availability...