CVE-2026-119201

The Nuxt web development framework (versions 4.6.0 through 4.6.3) is vulnerable to an information disclosure flaw where the dev server exposes a generated appSecret file (typically located at .nuxt/app-secret). This occurs because the file is stored within a directory permitted by the Vite server...