All vulnerabilities

Servers and applications

GHSA-x2wv-5868-p7v2

@nuxt/webpack-builder and @nuxt/rspack-builder dev server serves built source to DNS rebinding pages

Severity
Low 3.1
Published
2 Nov 2026
Last changed
2 Nov 2026
Added to UpHeron
3 Nov 2026
Fixed in
4.0.0, 4.6.4
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
NuxtServers and applications · github:nuxt/nuxt
  • From 3.0.0 before 4.0.0
  • From 3.12.2 before 4.0.0
  • From 4.0.0 before 4.6.4

References