{"action":"Upgrade nuxt to 3.21.4 or later.","affected":[{"fixed":"4.4.4","introduced":"4.0.0"},{"fixed":"3.21.4","introduced":"3.11.0"}],"component":"nuxt","cve_ids":["CVE-2026-114131"],"ecosystem":"npm","exploited":false,"fixed_versions":["4.4.4","3.21.4"],"ghsa_id":"GHSA-6gq8-jgmh-3ffp","id":"tcs_01M5JMD9H2FT1QVSQ4Q3WGS7ZQ","modified_at":"2026-10-22T17:00:04.175927437Z","published_at":"2026-10-22T16:50:53Z","references":["https://osv.dev/vulnerability/GHSA-6gq8-jgmh-3ffp","https://github.com/nuxt/nuxt/security/advisories/GHSA-6gq8-jgmh-3ffp","https://nvd.nist.gov/vuln/detail/CVE-2026-114131","https://github.com/nuxt/nuxt/commit/81f86ac5ee82bb1a9b887e59f3bc84624d711497","https://github.com/nuxt/nuxt/commit/9123ed850c468a7424a868c20d0d49a5507d32e5","https://github.com/nuxt/nuxt","https://github.com/nuxt/nuxt/releases/tag/v3.21.11","https://github.com/nuxt/nuxt/releases/tag/v4.5.2"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-6gq8-jgmh-3ffp","url":"https://osv.dev/vulnerability/GHSA-6gq8-jgmh-3ffp"}],"summary":"Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes"}