Packages / nuxt / Security

HighVulnerabilityGHSA-wm8w-6qjm-cv43Published 5 Aug 2026

Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients

Affected · nuxt

  • >= 4.4.0, < 4.5.1

Fixed in

4.5.1

npm install nuxt@4.5.1

  1. Not affected

    0.0.1 – 4.3.1

    268 releases

  2. Affected

    4.4.2 – 4.5.0

    7 releases

  3. Fixed

    4.5.1 – 4.6.2

    5 releases, latest

280 stable releases of nuxt, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.