All 34 CVE vulnerabilities found in nuxt, with AI-generated Chinese analysis, references, and POCs.
This page aggregates Common Weakness Enumerations (CWE) associated with the Nuxt.js web application framework developed by Vercel. It collects reported security vulnerabilities affecting various versions of the Nuxt framework, its core dependencies, and associated ecosystem packages. The data spans from the initial public release of the framework up to the most recent disclosures in the current year, providing a longitudinal view of security incidents. Here, you can track vendor advisories released by the Nuxt team, understand the prevalence and impact of specific weakness classes such as cross-site scripting or improper input validation, and look up the product's vulnerability history to assess risk exposure over time. The aggregation includes both direct flaws within the Nuxt codebase and indirect vulnerabilities arising from third-party libraries utilized by default in standard project configurations. This resource is designed for security researchers, developers, and system administrators who need to audit their Nuxt-based applications against known issues. By centralizing this information, the page facilitates better decision-making regarding patching strategies, dependency management, and security posture evaluation. Users can filter results by severity, version, or weakness type to identify relevant threats specific to their deployment environment. The information is sourced from official vendor advisories, public vulnerability databases, and automated scanning reports, ensuring a comprehensive overview of the threat landscape for this popular JavaScript framework.
Vendor: nuxt
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-24360 | Opening a malicious website while running a Nuxt dev server could allow read-only access to code CWE-200 | 5.3 | Medium | 2025-01-25 |
| CVE-2024-34344 | Remote code execution via the browser when running the test locally in nuxt CWE-94 | 8.8 | High | 2024-08-05 |
| CVE-2024-34343 | Cross-site Scripting (XSS) in navigateTo if used after SSR in nuxt CWE-79 | 6.3 | Medium | 2024-08-05 |
| CVE-2024-23657 | Path Traversal: '../filedir' in Nuxt Devtools CWE-22 | 8.8 | High | 2024-08-05 |
All 34 known CVE vulnerabilities affecting nuxt with full Chinese analysis, references, and POCs where available.