@nuxt/ui

4.12.0 · 15 Oct 2026MIT412.4k / weekRepository Homepage npm Atom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for @nuxt/ui. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	4.12.0	Safe from 4.8.1
	3.3.7	1 open advisory, worst moderate
	2.22.3	5 open advisories, worst moderate · last release Sep 2025, no longer updated

Your version

Moderate
@nuxt/ui: UAuthForm / UForm SSR markup omits `method`, leaking credentials via GET if submitted before hydrationGHSA-gj2h-2fpw-fhv9 · 2 Jul 2026
- 4.x4.0.0 – 4.8.0Fixed in 4.8.1
- 3.x3.0.0 – 3.3.7No fix on 3.x · move to 4.8.1
- 2.x and older0.1.0 – 2.22.3No fix, no longer updated · move to 4.8.1

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 22 Oct 2026. Releases and advisories last read 22 Oct 2026.