{"action":"Upgrade nuxt to 3.21.10 or later.","affected":[{"fixed":"4.5.1","introduced":"4.0.0"},{"fixed":"3.21.10","introduced":"3.4.0"}],"component":"nuxt","cve_ids":["CVE-2026-71320"],"ecosystem":"npm","epss":0.0071,"exploited":false,"fixed_versions":["4.5.1","3.21.10"],"ghsa_id":"GHSA-9473-5f9j-94wq","id":"tcs_01M5KFEPDKPP8GSNEKWFEZM29B","modified_at":"2026-08-05T21:55:59.573845Z","published_at":"2026-08-05T21:29:55Z","references":["https://osv.dev/vulnerability/GHSA-9473-5f9j-94wq","https://github.com/nuxt/nuxt/security/advisories/GHSA-9473-5f9j-94wq","https://github.com/nuxt/nuxt/commit/5b60017f7f1d5e9384cadf1d6c580b99d583c418","https://github.com/nuxt/nuxt/commit/ee6c846338f4eb75801815dda86df1f494725859","https://github.com/nuxt/nuxt","https://github.com/nuxt/nuxt/releases/tag/v3.21.10","https://github.com/nuxt/nuxt/releases/tag/v4.5.1"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-9473-5f9j-94wq","url":"https://osv.dev/vulnerability/GHSA-9473-5f9j-94wq"}],"summary":"Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props"}