All vulnerabilities

Servers and applications

GHSA-p4h3-4h99-9665

Nuxt Vite server builder wildcard `redirect` route rules can redirect to another origin

Severity: Low 3.1
Published: 2 Nov 2026
Last changed: 2 Nov 2026
Added to UpHeron: 3 Nov 2026
Fixed in: 4.6.4
Sources: Project advisories (GitHub)

Affected software

Software	Affected versions
NuxtServers and applications · `github:nuxt/nuxt`	From 4.6.0 before 4.6.4

References

GitHub Advisory Database https://github.com/advisories/GHSA-p4h3-4h99-9665
github.com https://github.com/nuxt/nuxt/security/advisories/GHSA-p4h3-4h99-9665