CVE-2026-114133

The Nuxt web development framework (versions 3.13.0 through 4.6.2 ) contains a vulnerability where the server-island renderer serializes raw useHeadSafe entry input into the island response without preserving the safe-input marker. This causes NuxtIsland to subsequently insert that input into the...