{"action":"Upgrade @nuxt/ui to 4.8.1 or later.","affected":[{"fixed":"4.8.1","introduced":"0"}],"component":"@nuxt/ui","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["4.8.1"],"ghsa_id":"GHSA-gj2h-2fpw-fhv9","id":"tcs_01M5KFRSMP7XTDAT1FWTD1AM02","modified_at":"2026-08-04T22:00:24.148635461Z","published_at":"2026-07-02T20:16:12Z","references":["https://osv.dev/vulnerability/GHSA-gj2h-2fpw-fhv9","https://github.com/nuxt/ui/security/advisories/GHSA-gj2h-2fpw-fhv9","https://github.com/nuxt/ui/pull/6512","https://github.com/nuxt/ui","https://github.com/nuxt/ui/releases/tag/v4.8.1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-gj2h-2fpw-fhv9","url":"https://osv.dev/vulnerability/GHSA-gj2h-2fpw-fhv9"}],"summary":"@nuxt/ui: UAuthForm / UForm SSR markup omits `method`, leaking credentials via GET if submitted before hydration"}