CVE-2026-128072

The Nuxt web development framework contains a vulnerability in the development middleware of @nuxt/webpack-builder (versions 3.0.0 to 4.6.4) and @nuxt/rspack-builder (versions 3.12.2 to 4.6.4). The middleware incorrectly trusts Origin , Referer , or Sec-Fetch-Site headers when the Host header mat...