All vulnerabilities

Servers and applications

GHSA-hf59-9xwc-2g4p

Colliding island props can share one `/__nuxt_island` path (incomplete fix for CVE-2026-46342)

Severity
Low 3.1
Published
2 Nov 2026
Last changed
2 Nov 2026
Added to UpHeron
3 Nov 2026
Fixed in
4.0.0, 4.6.4
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
NuxtServers and applications · github:nuxt/nuxt
  • From 3.21.6 before 4.0.0
  • From 4.4.6 before 4.6.4

References