MEDIUM5.4npm
GHSA-g8wj-3cr3-6w7v· CVE-2026-46342Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning
Modified: 7/8/2026
package
npm/@nuxt/nitro-server
pkg:npm/%40nuxt/nitro-server
MEDIUM5.3npm
GHSA-hg3f-28rg-4jxj· CVE-2026-47200Nuxt's route middleware is not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`
Modified: 7/8/2026