Packages / nuxt / Security

LowVulnerabilityGHSA-p6jq-8vc4-79f6Published 17 Sept 2025

Nuxt has Client-Side Path Traversal in Nuxt Island Payload Revival

Affected · nuxt

  • >= 3.6.0, < 3.19.0
  • >= 4.0.0, < 4.1.0

Fixed in

4.1.0

npm install nuxt@4.1.0

  1. Not affected

    0.0.1 – 3.5.3

    183 releases

  2. Affected

    3.6.0 – 3.18.1

    54 releases

  3. Fixed

    3.19.0 – 3.21.11

    18 releases

  4. Affected

    4.0.0 – 4.0.3

    4 releases

  5. Fixed

    4.1.0 – 4.6.2

    21 releases, latest

280 stable releases of nuxt, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.