CVE-2025-59414
1 advisory.
npm/nuxt CVE-2025-59414: low 3.1, EPSS 0.37%
Nuxt has Client-Side Path Traversal in Nuxt Island Payload Revival
Action: Upgrade nuxt to 3.19.0 or later.
npm i nuxt@3.19.0npm i nuxt@4.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.6.0 | 3.19.0 | - |
| 4.0.0 | 4.1.0 | - |
Fixed versions
| 3.19.0 | 4.1.0 |
Sources
- osv: GHSA-p6jq-8vc4-79f6
- https://github.com/nuxt/nuxt/security/advisories/GHSA-p6jq-8vc4-79f6
- https://nvd.nist.gov/vuln/detail/CVE-2025-59414
- https://github.com/nuxt/nuxt/commit/2566d2046bccb158d98fb13e42ce4b2c33fb2595
- https://github.com/nuxt/nuxt
CVE-2025-59414 · published · modified · JSON