CVE-2026-71320

Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /nuxtisland/ props into a dynamic component when "vue.runtimeCompiler: true" is enabled, causing template execution in the Nitro process. This issue is...

PT-2026-68949

Impact Nuxt server islands accept props via the / nuxt island/ endpoint. When vue.runtimeCompiler: true is enabled off by default and the application has a server island component that forwards props into Vue's dynamic component resolution , resolveDynamicComponent, or h, an attacker can inject a...

PT-2026-68339

Name of the Vulnerable Software and Affected Versions Nuxt versions 3.4.0 through 3.21.9 Nuxt versions 4.0.0 through 4.5.0 Description An issue exists where an attacker can achieve server-side remote code execution in the Nitro process by injecting a template key through the / nuxt island/ endpoi...

CVE-2026-71320: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /nuxtisland/ props into a dynamic component when vue.runtimeCompiler: true is enabled, causing template execution in the Nitro process. This issue is fixe...