CVE-2026-71316
1 advisory.
npm/nuxt CVE-2026-71316: high 7.5, EPSS 0.51%
Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients
Action: Upgrade nuxt to 4.5.1 or later.
npm i nuxt@4.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.4.0 | 4.5.1 | - |
Fixed versions
| 4.5.1 |
Sources
- osv: GHSA-wm8w-6qjm-cv43
- https://github.com/nuxt/nuxt/security/advisories/GHSA-wm8w-6qjm-cv43
- https://github.com/nuxt/nuxt/commit/ac9b41a36b62296a117862254ee7d2b21a2a5203
- https://github.com/nuxt/nuxt
- https://github.com/nuxt/nuxt/releases/tag/v4.5.1
CVE-2026-71316 · published · modified · JSON