Releases of nuxt
280 stable releases, newest first. Release notes are kept for the last 90 days; older ones link to where they were published.
4.6.2
16 October 20264.6.1
9 October 20264.6.0
5 October 2026Section of a shared release note
Nuxt CLI v4
Alongside the release of Nuxt v4.6, today also brings a new major release of the Nuxt CLI:
@nuxt/cliv4. It ships as a dependency ofnuxt, so you'll get it automatically when you upgrade.Most of what's new is in
nuxt dev:an interactive terminal UI, showing URLs, startup progress and keyboard shortcuts, with panels to dive into error logs, routes, network requests and more
4.5.2
5 August 20264.5.1
27 July 2026⚠️ This is a security release. We recommend upgrading as soon as possible with
npx nuxt upgrade --dedupe.It fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in
@nuxt/devtools@3.3.1, which fixes a separate critical development-only RCE.If you already upgraded for the earlier route rule advisory (CVE-2026-53721), you still need this release: one of the fixes addresses a regression introduced by that fix.
If you use the
cache,swrorisrroute rules, purge any CDN or edge cache after upgrading; a leaked_payload.jsonmay already be cached upstream.4.5.0
18 July 20264.4.8
8 June 20264.4.7
2 June 20264.4.6
18 May 20264.4.5
10 May 20264.4.4
29 April 20264.4.2
12 March 20264.3.1
7 February 20264.3.0
22 January 20264.2.2
9 December 20254.2.1
6 November 20254.2.0
25 October 20254.1.3
6 October 20254.1.2
12 September 20254.1.1
5 September 20254.1.0
2 September 20254.0.3
5 August 20254.0.2
29 July 20254.0.1
21 July 20254.0.0
15 July 20253.21.11
5 August 20263.21.11 is a patch release.
[!IMPORTANT] Nuxt v3 is now end-of-life. Please upgrade to Nuxt v4, or you may wish to check out our partner HeroDevs who provide never-ending support for end-of-life releases
Changelog
3.21.10
27 July 2026⚠️ This is a security release. We recommend upgrading as soon as possible with
npx nuxt upgrade --dedupe.It fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, and dev server path disclosure. Refreshing your lockfile also pulls in
@nuxt/devtools@3.3.1, which fixes a separate critical development-only RCE.If you already upgraded for the earlier route rule advisory (CVE-2026-53721), you still need this release: one of the fixes addresses a regression introduced by that fix.
Full details: Nuxt Security Patch Releases and GitHub Security Advisories.
3.21.9
18 July 20263.21.8
8 June 20263.21.7
2 June 20263.21.6
18 May 20263.21.5
10 May 20263.21.4
29 April 20263.21.2
12 March 20263.21.1
7 February 20263.21.0
22 January 20263.20.2
9 December 20253.20.1
6 November 20253.20.0
28 October 20253.19.3
6 October 20253.19.2
12 September 20253.19.1
5 September 20253.19.0
2 September 20253.18.1
5 August 20253.18.0
29 July 20253.17.7
13 July 20253.17.6
1 July 20253.17.5
3 June 20253.17.4
20 May 20253.17.3
12 May 2025