MEDIUM5.4npm
GHSA-g8wj-3cr3-6w7v· CVE-2026-46342Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning
Modified: 7/8/2026
package
pkg:npm/%40nuxt/nitro-server
Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning
Modified: 7/8/2026
Nuxt's route middleware is not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`
Modified: 7/8/2026