`@nuxt/nitro-server`

Ecosystem:
npm

Package URL:
pkg:npm/@nuxt/nitro-server

Total PRs:
13 Dependabot PRs

Latest PR:
10 days ago

Unique Repositories:
13 repositories

Unique Repos (30 days):
8 repositories

Security Advisories

Nuxt's route middleware is not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`

GHSA-hg3f-28rg-4jxj CVE-2026-47200 MODERATE published 17 days ago • updated 1 day ago

### Summary When `experimental.componentIslands` is enabled (default in Nuxt 4), any `.server.vue` file under `pages/` is automatically registered...

Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning

GHSA-g8wj-3cr3-6w7v CVE-2026-46342 LOW published 27 days ago • updated 1 day ago

### Summary The `/__nuxt_island/*` endpoint accepts attacker-controlled `props` query/body parameters and renders any island component without ver...

Recent PRs (filtered by: Open )

RSS Feed Clear filter

chore(deps): bump @nuxt/nitro-server and nuxt

drunomics/lupus-decoupled-website #179

4.4.2 → 4.4.6 Patch PR

Open 27 days ago 1 comment

chore(deps-dev): Bump @nuxt/nitro-server from 3.21.1 to 3.21.6

getsentry/sentry-javascript #21017

3.21.1 → 3.21.6 Patch PR

Open 27 days ago 1 comment

chore(deps): bump the npm-minor-patch group with 31 updates

ZUOH506/voicehub506 #1

4.4.4 → 4.4.5 Patch PR

Open about 1 month ago 3 comments

chore(deps): bump the npm-minor-patch group with 276 updates

weiyb852/VoiceHub-93b43 #13

4.3.1 → 4.4.4 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump the npm-minor-patch group with 266 updates

weiyb852/VoiceHub-e7cc6 #12

4.3.1 → 4.4.2 Minor PR

Open about 2 months ago 1 comment

chore(deps): bump the npm-minor-patch group with 133 updates

Wenzixi2010/VoiceHub #2

4.3.1 → 4.4.2 Minor PR

Open 3 months ago 3 comments

chore(deps): bump the npm-minor-patch group with 129 updates

laoshuikaixue/VoiceHub #129

3.20.2 → 3.21.0 Minor PR

Open 5 months ago 2 comments

Package Details

Name:	`@nuxt/nitro-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@nuxt/nitro-server`
JSON API:	View JSON

Security Advisories

2

Active advisories

MODERATE 1

LOW 1

View All npm Advisories

Package Information

Description:

Nitro server integration for Nuxt

Repository:	https://github.com/nuxt/nuxt
Homepage:	https://nuxt.com
Latest Release:	`4.2.2` 6 months ago
Dependent Repos:	0
Dependent Packages:	0
Downloads:	1,339,798
Ranking:	Top 23.6946% by dependent repos Top 34.1796% by dependent pkgs

PR Status

Open 7 (53.8%)

Merged 0 (0.0%)

Closed 6 (46.2%)

PR Types

Minor 6 (46.2%)

Patch 7 (53.8%)