All products

@nuxt/vite-builder

npm · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Nuxt dev server exposes private runtime config through the Nitro dev bundleCVE-2026-119199 · GHSA-648H-GW55-M2G7 @nuxt/vite-builder npm Medium Fix reported
Nuxt dev server exposes generated appSecret through Vite file servingCVE-2026-119201 · GHSA-3XF4-9G3C-4H4W @nuxt/vite-builder npm Medium Fix reported
Nuxt dev server arbitrary file read through client error reportsCVE-2026-119198 · GHSA-X287-WCFC-Q46C @nuxt/vite-builder npm Medium Fix reported
Opening a malicious website while running a Nuxt dev server could allow read-only access to codeCVE-2025-24360 · GHSA-2452-6XJ8-JH47 @nuxt/vite-builder npm Medium Fix reported