`@nuxt/nitro-server`

Ecosystem:
npm

Package URL:
pkg:npm/@nuxt/nitro-server

Total PRs:
10 Dependabot PRs

Latest PR:
4 days ago

Unique Repositories:
10 repositories

Unique Repos (30 days):
5 repositories

Security Advisories

Nuxt's route middleware is not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`

GHSA-hg3f-28rg-4jxj CVE-2026-47200 MODERATE published 4 days ago • updated 1 day ago

### Summary When `experimental.componentIslands` is enabled (default in Nuxt 4), any `.server.vue` file under `pages/` is automatically registered...

Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning

GHSA-g8wj-3cr3-6w7v CVE-2026-46342 LOW published 14 days ago • updated 1 day ago

### Summary The `/__nuxt_island/*` endpoint accepts attacker-controlled `props` query/body parameters and renders any island component without ver...

Recent PRs (filtered by: Closed , Patch PRs )

RSS Feed Clear filter

build(deps): bump @nuxt/nitro-server and nuxt

Nokoyohei/pandaTOdamagecalc #74

3.21.1 → 3.21.6 Patch PR

Closed 4 days ago 1 comment

chore(deps): bump @nuxt/nitro-server and nuxt

moebiusmania/salvatorelaisa.blog #267

4.4.4 → 4.4.6 Patch PR

Closed 14 days ago 1 comment

Package Details

Name:	`@nuxt/nitro-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@nuxt/nitro-server`
JSON API:	View JSON

Security Advisories

2

Active advisories

MODERATE 1

LOW 1

View All npm Advisories

Package Information

Description:

Nitro server integration for Nuxt

Repository:	https://github.com/nuxt/nuxt
Homepage:	https://nuxt.com
Latest Release:	`4.2.2` 6 months ago
Dependent Repos:	0
Dependent Packages:	0
Downloads:	1,339,798
Ranking:	Top 23.6946% by dependent repos Top 34.1796% by dependent pkgs

PR Status

Open 7 (70.0%)

Merged 0 (0.0%)

Closed 3 (30.0%)

PR Types

Minor 5 (50.0%)

Patch 5 (50.0%)