CVE-2026-119200

The Nuxt web development framework versions 4.6.0 through 4.6.2 are vulnerable to a path traversal issue where literal or percent-encoded dot segments (e.g., /%2e/admin) are resolved before page rendering. This allows attackers to bypass Nitro routing , server/middleware path checks, and server r...