@nuxt/vite-builder vulnerabilities
CVEs whose affected-version data names the @nuxt/vite-builder package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-119199Medium· 5.9Nuxt dev server exposes private runtime config through the Nitro dev bundle
Nuxt dev server exposes private runtime config through the Nitro dev bundle
▾ Sunlitnuxt · @nuxt/vite-builderEPSS 0.35%via GHSA
CVE-2026-119198Medium· 5.9Nuxt dev server arbitrary file read through client error reports
Nuxt dev server arbitrary file read through client error reports
▾ Sunlitnuxt · @nuxt/vite-builderEPSS 0.29%via GHSA
CVE-2026-119201Medium· 4.8Nuxt dev server exposes generated appSecret through Vite file serving
Nuxt dev server exposes generated appSecret through Vite file serving
▾ Sunlitnuxt · @nuxt/vite-builderEPSS 0.21%via GHSA