@nuxt/nitro-server
Ecosystem:
npm
npm
Package URL:
pkg:npm/@nuxt/nitro-server
Total PRs:
10 Dependabot PRs
10 Dependabot PRs
Latest PR:
4 days ago
4 days ago
Unique Repositories:
10 repositories
10 repositories
Unique Repos (30 days):
5 repositories
5 repositories
Security Advisories
Nuxt's route middleware is not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`
GHSA-hg3f-28rg-4jxj
CVE-2026-47200
MODERATE
published 4 days ago
• updated about 20 hours ago
### Summary
When `experimental.componentIslands` is enabled (default in Nuxt 4), any `.server.vue` file under `pages/` is automatically registered...
Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning
GHSA-g8wj-3cr3-6w7v
CVE-2026-46342
LOW
published 14 days ago
• updated about 20 hours ago
### Summary
The `/__nuxt_island/*` endpoint accepts attacker-controlled `props` query/body parameters and renders any island component without ver...
Recent PRs
build(deps): bump @nuxt/nitro-server and nuxt
Nokoyohei/pandaTOdamagecalc #74
3.21.1 → 3.21.6
Patch PR
Closed
4 days ago
1 comment
chore(deps): bump @nuxt/nitro-server and nuxt
moebiusmania/salvatorelaisa.blog #267
4.4.4 → 4.4.6
Patch PR
Closed
14 days ago
1 comment
chore(deps): bump @nuxt/nitro-server and nuxt
drunomics/lupus-decoupled-website #179
4.4.2 → 4.4.6
Patch PR
Open
14 days ago
1 comment
chore(deps-dev): Bump @nuxt/nitro-server from 3.21.1 to 3.21.6
getsentry/sentry-javascript #21017
3.21.1 → 3.21.6
Patch PR
Open
14 days ago
1 comment
chore(deps): bump the npm-minor-patch group with 31 updates
4.4.4 → 4.4.5
Patch PR
Open
19 days ago
3 comments
chore(deps): bump the npm-minor-patch group with 276 updates
4.3.1 → 4.4.4
Minor PR
Open
about 1 month ago
1 comment
chore(deps): bump the npm-minor-patch group with 266 updates
4.3.1 → 4.4.2
Minor PR
Open
about 1 month ago
1 comment
chore(deps): bump the npm-minor-patch group with 249 updates
4.3.0 → 4.4.2
Minor PR
Closed
3 months ago
2 comments
chore(deps): bump the npm-minor-patch group with 133 updates
4.3.1 → 4.4.2
Minor PR
Open
3 months ago
3 comments
chore(deps): bump the npm-minor-patch group with 129 updates
3.20.2 → 3.21.0
Minor PR
Open
4 months ago
2 comments
Package Details
| Name: | @nuxt/nitro-server |
| Ecosystem: | npm |
| PURL Type: | npm |
| Package URL: | pkg:npm/@nuxt/nitro-server |
| JSON API: | View JSON |
Security Advisories
Package Information
Description:
Nitro server integration for Nuxt
| Repository: | https://github.com/nuxt/nuxt |
| Homepage: | https://nuxt.com |
| Latest Release: |
4.2.2
6 months ago |
| Dependent Repos: | 0 |
| Dependent Packages: | 0 |
| Downloads: | 1,339,798 |
| Ranking: | Top 23.6946% by dependent repos Top 34.1796% by dependent pkgs |