{"action":"Upgrade nuxt to 3.21.10 or later.","affected":[{"fixed":"4.5.1","introduced":"4.0.0"},{"fixed":"3.21.10","introduced":"3.1.0"}],"component":"nuxt","cve_ids":["CVE-2026-71318"],"ecosystem":"npm","epss":0.00315,"exploited":false,"fixed_versions":["4.5.1","3.21.10"],"ghsa_id":"GHSA-48hr-524c-v5w3","id":"tcs_01M5KEZSBXMW3V5W8GZB81AETR","modified_at":"2026-08-05T21:41:00.889538Z","published_at":"2026-08-05T21:21:33Z","references":["https://osv.dev/vulnerability/GHSA-48hr-524c-v5w3","https://github.com/nuxt/nuxt/security/advisories/GHSA-48hr-524c-v5w3","https://github.com/nuxt/nuxt","https://github.com/nuxt/nuxt/releases/tag/v3.21.10","https://github.com/nuxt/nuxt/releases/tag/v4.5.1"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-48hr-524c-v5w3","url":"https://osv.dev/vulnerability/GHSA-48hr-524c-v5w3"}],"summary":"Nuxt: Unauthorized Component Instantiation via Server Island Props"}