CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-11-02
Nuxt 4.x Route Parameter Confusion Vulnerability (CVE-2026-120309) Analysis & Mitigation Guide
[Affected Scope] Nuxt versions from 4.6.0 before 4.6.2
[Impact] Attackers can cause a discrepancy between Nuxt helpers and the h3 router by sending paths with an encoded question mark (%3F), potentially bypassing authorization checks to access unauthorized resources.
[Mitigation] Immediately upgrade the Nuxt package to a secure version (4.6.2 or higher).