CVE-2026-128076

The Nuxt web development framework (versions 3.21.6 to before 4.0.0 and 4.4.6 to 4.6.4) is vulnerable to a path collision issue. The root cause is that the /__nuxt_island path hash uses ohash serialization without escaping quotes in string values or delimiters in object keys. This allows differen...