Baja
ghsa-rq7w-g337-39qq
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 58
Restablecer filtros
Media
CVE-2026-47200
Nuxt's route middleware is not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`
Baja
CVE-2026-46342
Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning
Media
CVE-2026-45670
Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99)
Media
CVE-2026-45669
Nuxt: Reflected XSS in `navigateTo()` external redirect
Baja
CVE-2026-44589
nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)
Alta
CVE-2026-42349
Clerk has an authorization bypass when combining organization, billing, or reverification checks
Crítica
CVE-2026-41248
Official Clerk JavaScript SDKs: Middleware-based route protection bypass
Media
CVE-2026-39315
Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe()
Media
CVE-2026-34405
Nuxt OG Image is vulnerable to reflected XSS via query parameter injection into HTML attributes
Media
ghsa-pqhr-mp3f-hrpp
Nuxt OG Image vulnerable to Server-Side Request Forgery via user-controlled parameters
Media
CVE-2026-34404
Nuxt OG Image is vulnerable to Denial of Service via unbounded image dimensions
Media
CVE-2026-82866
PDFME has SSRF via Unvalidated URL Fetch in `getB64BasePdf` When `basePdf` Is Attacker-Controlled
Media
CVE-2026-31860
Unhead has XSS bypass in `useHeadSafe` via attribute name injection and case-sensitive protocol check
Alta
CVE-2026-23527
h3 v1 has Request Smuggling (TE.TE) issue
Media
CVE-2025-65944
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Media
CVE-2025-52662
Nuxt DevTools vulnerable to cross-site scripting (XSS)
Baja
CVE-2025-59414
Nuxt has Client-Side Path Traversal in Nuxt Island Payload Revival
Alta
CVE-2025-54075
Nuxt MDC has an XSS vulnerability in markdown rendering that bypasses HTML filtering
Alta
CVE-2025-53548
@clerk/backend Performs Insufficient Verification of Data Authenticity
Alta
CVE-2025-27415
Nuxt allows DOS via cache poisoning with payload rendering response
Crítica
CVE-2025-24981
Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc
Baja
ghsa-r5w7-f542-q2j4
Potential DoS when using ContextLines integration
Media
CVE-2025-24361
Opening a malicious website while running a Nuxt dev server could allow read-only access to code
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.