CVE-2025-24361
2 advisories.
npm/@nuxt/webpack-builder CVE-2025-24361: medium 5.3, EPSS 0.34%
Opening a malicious website while running a Nuxt dev server could allow read-only access to code
Action: Upgrade @nuxt/webpack-builder to 3.15.3 or later.
npm i @nuxt/webpack-builder@3.15.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.15.3 | - |
Fixed versions
| 3.15.3 |
Sources
- osv: GHSA-4gf7-ff8x-hq99
- https://github.com/nuxt/nuxt/security/advisories/GHSA-4gf7-ff8x-hq99
- https://nvd.nist.gov/vuln/detail/CVE-2025-24361
- https://github.com/nuxt/nuxt/commit/7eeb910bf4accb1e0193b9178c746f06ad3dd88f
- https://github.com/nuxt/nuxt
CVE-2025-24361 · published · modified · JSON
npm/@nuxt/rspack-builder CVE-2025-24361: medium 5.3, EPSS 0.34%
Opening a malicious website while running a Nuxt dev server could allow read-only access to code
Action: Upgrade @nuxt/rspack-builder to 3.15.3 or later.
npm i @nuxt/rspack-builder@3.15.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.12.2 | 3.15.3 | - |
Fixed versions
| 3.15.3 |
Sources
- osv: GHSA-4gf7-ff8x-hq99#npm/@nuxt/rspack-builder
- https://github.com/nuxt/nuxt/security/advisories/GHSA-4gf7-ff8x-hq99
- https://nvd.nist.gov/vuln/detail/CVE-2025-24361
- https://github.com/nuxt/nuxt/commit/7eeb910bf4accb1e0193b9178c746f06ad3dd88f
- https://github.com/nuxt/nuxt
CVE-2025-24361 · published · modified · JSON