Open Redirect

🗓️ 24 Jun 2026 05:36:35Reported by Veracode Vulnerability DatabaseType

Nuxt open redirect via navigateTo path normalization bypasses checks, enabling phishing.

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2026-56326	22 Jun 202621:04	–	attackerkb
CVE	CVE-2026-56326	22 Jun 202621:04	–	cve
Cvelist	CVE-2026-56326 Nuxt - Server-Side Open Redirect via Path-Normalization Bypass in navigateTo	22 Jun 202621:04	–	cvelist
EUVD	EUVD-2026-38375	22 Jun 202621:04	–	euvd
Github Security Blog	Nuxt: URL-handling weaknesses in `navigateTo` and `reloadNuxtApp`: SSR open redirect, client-side script execution via the `open` option, and protocol-relative bypass in `reloadNuxtApp`	16 Jun 202613:47	–	github
NVD	CVE-2026-56326	22 Jun 202622:16	–	nvd
OSV	GHSA-C9CV-MQ2M-PPP3 Nuxt: URL-handling weaknesses in `navigateTo` and `reloadNuxtApp`: SSR open redirect, client-side script execution via the `open` option, and protocol-relative bypass in `reloadNuxtApp`	16 Jun 202613:47	–	osv
Patchstack	NPM: Nuxt: URL-handling weaknesses in `navigateTo` and `reloadNuxtApp`: SSR open redirect, client-side script execution via the `open` option, and protocol-relative bypass in `reloadNuxtApp`	16 Jun 202613:47	–	patchstack
Positive Technologies	PT-2026-51413	16 Jun 202600:00	–	ptsecurity
Snyk	Open Redirect	16 Jun 202613:47	–	snyk

Vulners

Node

nuxt nuxtMatch3.0.0js

nuxt nuxtRange3.0.0-rc.0–3.21.6js

nuxt nuxtRange4.0.0-alpha.1–4.4.6js

Source	Link
github	www.github.com/nuxt/nuxt/security/advisories/GHSA-c9cv-mq2m-ppp3
github	www.github.com/nuxt/nuxt/commit/2cce6fb02e621196d56df92e05594e07469b5a6d
github	www.github.com/nuxt/nuxt/commit/1f2dd5e78c77576437138e97671965573c232835
github	www.github.com/nuxt/nuxt/pull/35115
vulncheck	www.vulncheck.com/advisories/nuxt-server-side-open-redirect-via-path-normalization-bypass-in-navigateto

26 Jun 2026 11:14Current

5.9Medium risk

Vulners AI Score5.9

CVSS 45.3

CVSS 3.16.1

EPSS0.00197

SSVC