nuxt nuxt

Name: nuxt nuxt
Brand: nuxt

productUS

cpe:2.3:a:nuxt:nuxt:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

1critical4high7medium1low

updated 2026-10-28

vulnerabilities (18)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-27415US	—	0.39% (33rd)	Exploit	3.16.0	2025-03-19	3.0.0 → 3.16.0
CVE-2023-3224US	critical9.8	58.6% (99th)	—	3.4.3	2023-06-13	3.4.0 → 3.4.3
CVE-2024-23657US	high8.8	1.21% (68th)	—	1.3.9	2024-08-05	< 1.3.9
CVE-2024-34344US	high8.8	0.83% (57th)	—	3.12.4	2024-08-05	3.4.0 → 3.12.4
CVE-2024-42352US	high7.5	0.65% (51st)	—	1.4.5	2024-08-05	< 1.4.5
CVE-2023-0878US	medium6.1	0.53% (45th)	—	3.2.1	2023-02-17	3 versions
CVE-2024-34343US	medium6.1	0.44% (38th)	—	3.12.4	2024-08-05	< 3.12.4
CVE-2026-56698US	—	0.41% (35th)	—	4.4.7	2026-06-22	2 versions
CVE-2026-53721US	high8.2OT elevated	0.40% (34th)	—	3.21.7	2026-06-12	2 versions
CVE-2025-59414US	low3.1	0.37% (31st)	—	4.1.0	2025-09-17	2 versions
CVE-2026-56326US	—	0.36% (30th)	—	4.4.7	2026-06-22	2 versions
CVE-2026-56317US	medium6.1	0.34% (28th)	—	3.21.7	2026-06-20	2 versions
CVE-2026-56697US	—	0.34% (27th)	—	3.21.7	2026-06-22	2 versions
CVE-2026-53722US	medium5.4	0.29% (22nd)	—	3.21.7	2026-06-12	2 versions
CVE-2026-47200US	medium5.3OT elevated	0.23% (14th)	—	3.21.6	2026-06-12	2 versions
CVE-2026-45669US	medium5.4	0.18% (7th)	—	4.4.6	2026-06-12	2 versions
CVE-2026-56301US	—OT elevated	0.15% (4th)	—	4.4.7	2026-06-23	2 versions
CVE-2026-46342US	medium5.4	0.09% (0th)	—	3.21.6	2026-06-12	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')3 CVEs
CWE-83Improper Neutralization of Script in Attributes in a Web Page3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-349Acceptance of Extraneous Untrusted Data With Trusted Data2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-178Improper Handling of Case Sensitivity1 CVEs
CWE-24Path Traversal: '../filedir'1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.