nitro
Ecosystem:
npm
npm
Package URL:
pkg:npm/nitro
Total PRs:
36 Dependabot PRs
36 Dependabot PRs
Latest PR:
about 20 hours ago
about 20 hours ago
Unique Repositories:
26 repositories
26 repositories
Unique Repos (30 days):
9 repositories
9 repositories
Security Advisories
Nitro has a proxy scope bypass via percent-encoded path traversal in `routeRules`
GHSA-5w89-w975-hf9q
CVE-2026-44373
MODERATE
published about 1 month ago
• updated about 6 hours ago
A proxy route rule like:
```ts
routeRules: {
"/api/orders/**": { proxy: { to: "http://upstream/orders/**" } }
}
```
is intended to limit the pr...
Nitro has an Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules
GHSA-9phm-9p8f-hw5m
CVE-2026-44372
MODERATE
published about 1 month ago
• updated about 6 hours ago
A redirect route rule like:
```ts
routeRules: {
"/legacy/**": { redirect: "/**" }
}
```
is intended to rewrite paths within the same host. Befo...
Recent PRs
chore(deps): bump the npm_and_yarn group across 2 directories with 20 updates
3.0.1-alpha.2 → 3.0.260610-beta
Patch PR
Closed
about 20 hours ago
1 comment
build(deps): bump the npm_and_yarn group across 7 directories with 8 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Open
1 day ago
4 comments
chore(deps): bump the npm_and_yarn group across 8 directories with 7 updates
daemon-blockint-tech/daemoncode #9
3.0.1-alpha.1 → 3.0.1-alpha.2
Closed
1 day ago
3 comments
chore(deps): bump the npm_and_yarn group across 6 directories with 9 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Closed
16 days ago
5 comments
chore(deps): bump the npm_and_yarn group across 7 directories with 9 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Closed
18 days ago
1 comment
chore(deps): bump the npm_and_yarn group across 7 directories with 10 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Closed
18 days ago
1 comment
chore(deps): bump the npm_and_yarn group across 7 directories with 8 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Closed
18 days ago
4 comments
chore(deps): bump the npm_and_yarn group across 10 directories with 12 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Closed
23 days ago
4 comments
chore(deps): bump the npm_and_yarn group across 10 directories with 12 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Closed
26 days ago
4 comments
chore(deps): bump the npm_and_yarn group across 4 directories with 5 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Open
29 days ago
2 comments
chore(deps): bump the npm_and_yarn group across 8 directories with 10 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Closed
about 1 month ago
5 comments
build(deps): bump the npm_and_yarn group across 2 directories with 4 updates
3.0.260415-beta → 3.0.260429-beta
Patch PR
Open
about 1 month ago
3 comments
chore(deps): Bump the npm_and_yarn group across 7 directories with 11 updates
SherfeyInv/sentry-javascript #199
3.0.260311-beta → 3.0.260415-beta
Patch PR
Open
about 1 month ago
2 comments
Bump the npm_and_yarn group across 8 directories with 9 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Closed
about 1 month ago
1 comment
chore(deps): bump the npm_and_yarn group across 6 directories with 8 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Closed
about 1 month ago
1 comment
chore(deps): bump the npm_and_yarn group across 6 directories with 9 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Closed
about 1 month ago
1 comment
chore(deps): bump the npm_and_yarn group across 6 directories with 5 updates
nexusct/ui #3
3.0.1-alpha.2 → 3.0.260429-beta
Patch PR
Open
about 1 month ago
3 comments
chore(deps): bump the production-dependencies group across 1 directory with 64 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Open
2 months ago
1 comment
build(deps): bump h3 and nitro in /ssr-app
3.0.0 → 3.0.260311-beta
Patch PR
Open
3 months ago
1 comment
chore(deps): bump the production-dependencies group across 1 directory with 59 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Open
3 months ago
1 comment
chore(deps): Bump the production-dependencies group across 1 directory with 60 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Closed
3 months ago
1 comment
Bump h3 and nitro in /with-tanstack-start
polarsource/examples #204
3.0.1-alpha.1 → 3.0.260311-beta
Patch PR
Closed
3 months ago
2 comments
chore(deps): bump the production-dependencies group across 1 directory with 57 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Open
3 months ago
1 comment
chore(deps): bump the production-dependencies group across 1 directory with 55 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Open
4 months ago
1 comment
chore(deps): Bump the production-dependencies group across 1 directory with 59 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Closed
4 months ago
1 comment
chore(deps): bump the production-dependencies group across 1 directory with 46 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Open
4 months ago
1 comment
chore(deps): bump the production-dependencies group across 1 directory with 42 updates
3.0.1-alpha.1 → 3.0.1-alpha.2
Closed
4 months ago
2 comments
Bump nitro from 3.0.1-alpha.1 to 3.0.1-alpha.2
3.0.1-alpha.1 → 3.0.1-alpha.2
Open
4 months ago
1 comment
chore(deps): bump nitro from 3.0.1-alpha.1 to 3.0.1-alpha.2
navikt/lumi #24
3.0.1-alpha.1 → 3.0.1-alpha.2
Open
4 months ago
2 comments
deps(deps-dev): bump nitro from 3.0.1-alpha.1 to 3.0.1-alpha.2
3.0.1-alpha.1 → 3.0.1-alpha.2
Open
4 months ago
1 comment
chore(deps): bump nitro from 3.0.1-alpha.1 to 3.0.1-alpha.2
3.0.1-alpha.1 → 3.0.1-alpha.2
Open
5 months ago
2 comments
chore(deps): bump nitro from 3.0.1-alpha.1 to 3.0.1-alpha.2 in /apps/web
3.0.1-alpha.1 → 3.0.1-alpha.2
Open
5 months ago
5 comments
chore(deps): Bump nitro from 3.0.1-alpha.0 to 3.0.1-alpha.1
kunalagra/Portfolio #404
3.0.1-alpha.0 → 3.0.1-alpha.1
Open
6 months ago
2 comments
Bump nitro from 3.0.1-alpha.0 to 3.0.1-alpha.1
3.0.1-alpha.0 → 3.0.1-alpha.1
Closed
7 months ago
1 comment
chore(deps): Bump nitro from 3.0.1-alpha.0 to 3.0.1-alpha.1
kunalagra/Portfolio #388
3.0.1-alpha.0 → 3.0.1-alpha.1
Open
7 months ago
1 comment
Package Details
| Name: | nitro |
| Ecosystem: | npm |
| PURL Type: | npm |
| Package URL: | pkg:npm/nitro |
| JSON API: | View JSON |
Security Advisories
Package Information
Description:
Build and Deploy Universal JavaScript Servers
| Repository: | https://github.com/nitrojs/nitro |
| Homepage: | https://nitro.build |
| Latest Release: |
3.0.0
8 months ago |
| Dependent Repos: | 12 |
| Dependent Packages: | 19 |
| Downloads: | 50,164 |
| Ranking: | Top 3.4138% by dependent repos Top 5.1101% by downloads Top 1.2375% by dependent pkgs |
PR Types
Patch
7 (19.4%)