VERIFIED
Nuxt official lifecycle source
Checked automatically. A source link alone does not verify a lifecycle boundary.
Extracted 3 lifecycle record(s), including 3 bounded date record(s), from the registered official source.
Open publisher source
← Search results
PRODUCT FAMILYFRAMEWORKVERIFIED
Nuxt
Nuxt
Nuxt is tracked by BlackTree as a software framework or development platform. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
Shown dates are scoped to the release and support phase named in the source. They should not be applied to other editions or service packs.
Product overview
Nuxt is tracked by BlackTree as a software framework or development platform. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
Main capabilities
- Application development components
- Versioned runtime or build interfaces
- Security and compatibility maintenance
Typical use
Used by software teams to build, run or maintain applications.
Deployment
Included in source projects, application dependencies, build systems or managed runtimes.
Lifecycle records
Official sources
Package vulnerability advisories
Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes
Fixed: 4.6.3
Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive
Fixed: 4.6.2
Nuxt server islands render `useHeadSafe` input without sanitisation
Fixed: 4.6.2
Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes
Fixed: 4.4.4, 3.21.4
Nuxt: URL-handling weaknesses in `navigateTo` and `reloadNuxtApp`: SSR open redirect, client-side script execution via the `open` option, and protocol-relative bypass in `reloadNuxtApp`
Fixed: 4.4.7, 3.21.7
Nuxt dev server vite-node IPC socket is world-connectable on Linux
Fixed: 4.4.7, 3.21.7
Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled
Fixed: 4.6.0
Cross-site scripting via <NoScript> slot content in Nuxt's head components
Fixed: 4.4.7, 3.21.7