CVE-2026-128074

The Nuxt web development framework (versions 4.6.0 to 4.6.3) is vulnerable to a Regular Expression Denial of Service (ReDoS) . The issue stems from a trailing-slash regular expression used in _payload.json URL generation and the experimental early-404 path, which exhibits quadratic complexity whe...