{"action":"Upgrade nuxt to 4.5.1 or later.","affected":[{"fixed":"4.5.1","introduced":"4.4.0"}],"component":"nuxt","cve_ids":["CVE-2026-71316"],"ecosystem":"npm","epss":0.00507,"exploited":false,"fixed_versions":["4.5.1"],"ghsa_id":"GHSA-wm8w-6qjm-cv43","id":"tcs_01M5KGFCVHMZED07929D875K3E","modified_at":"2026-08-05T21:41:00.744328Z","published_at":"2026-08-05T21:14:33Z","references":["https://osv.dev/vulnerability/GHSA-wm8w-6qjm-cv43","https://github.com/nuxt/nuxt/security/advisories/GHSA-wm8w-6qjm-cv43","https://github.com/nuxt/nuxt/commit/ac9b41a36b62296a117862254ee7d2b21a2a5203","https://github.com/nuxt/nuxt","https://github.com/nuxt/nuxt/releases/tag/v4.5.1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wm8w-6qjm-cv43","url":"https://osv.dev/vulnerability/GHSA-wm8w-6qjm-cv43"}],"summary":"Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients"}