Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/07/02 8:16 p.m.24 views

@nuxt/ui: UAuthForm / UForm SSR markup omits `method`, leaking credentials via GET if submitted before hydration

Summary UForm and UAuthForm render a server-side element with no method and no action attribute, relying on a hydrated @submit.prevent handler to intercept submission. If a user submits the form before Vue hydration has attached the handler autofill plus Enter on a slow network, JS bundle blocked...

5.8AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder