Threats tagged 'ghsa-c9cv-mq2m-ppp3'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.4%	CVE-2026-56326Nuxt: URL-handling weaknesses Medium6.1EPSS 0.4%2026-06-16GCVE DatabaseCVE-2026-56326 Three URL-handling weaknesses in Nuxt's client-navigation APIs (`navigateTo` and `reloadNuxtApp`) allow SSR open redirects, client-side script execution, and protocol-relative bypasses. These vulnerabilities can lead to phishing, OAuth token theft, or reflected XSS if user-controlled input is passed unsafely. Fixed in nuxt versions 4.4.7 and 3.21.7. EPSS 0.4%Vulnerability CWE-79 #ghsa-c9cv-mq2m-ppp3 #npm	GCVE Database	2026-06-16

Page 1 of 1