npm/@nuxt/ui: medium

@nuxt/ui: UAuthForm / UForm SSR markup omits `method`, leaking credentials via GET if submitted before hydration

Action: Upgrade @nuxt/ui to 4.8.1 or later.

npm i @nuxt/ui@4.8.1

Affected

Fixed versions

Sources

• osv: GHSA-gj2h-2fpw-fhv9
• https://github.com/nuxt/ui/security/advisories/GHSA-gj2h-2fpw-fhv9
• https://github.com/nuxt/ui/pull/6512
• https://github.com/nuxt/ui
• https://github.com/nuxt/ui/releases/tag/v4.8.1

published 2026-07-02T20:16:12Z · modified 2026-08-04T22:00:24.148635461Z · JSON