@nuxt/nitro-server

Nitro server integration for Nuxt
Licenses: MIT

Direct Vulnerabilities

Known vulnerabilities in the @nuxt/nitro-server package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Information Exposure

>=3.21.7 <3.21.10>=4.4.7 <4.5.1
  • M
Information Exposure

>=3.21.7 <3.21.10>=4.4.7 <4.5.1
  • H
Incorrect Authorization

>=3.21.7 <3.21.10>=4.4.7 <4.5.1
  • H
Improper Validation of Specified Quantity in Input

<3.21.10>=4.2.0 <4.5.1
  • M
Missing Authorization

>=4.4.2 <4.5.1
  • M
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

<3.21.10>=4.2.0 <4.5.1
  • C
Arbitrary Code Injection

<3.21.10>=4.2.0 <4.5.1
  • H
Allocation of Resources Without Limits or Throttling

<3.21.10>=4.2.0 <4.5.1
  • M
Authentication Bypass Using an Alternate Path or Channel

<3.21.6>=4.2.0 <4.4.6
  • L
HTTP Request Smuggling

>=3.20.0 <3.21.6>=4.2.0 <4.4.6

Package versions

29 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
4.5.25 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
4.5.127 Jul, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
4.5.018 Jul, 2026
  • 1
    C
  • 3
    H
  • 4
    M
  • 0
    L
4.4.88 Jun, 2026
  • 1
    C
  • 3
    H
  • 4
    M
  • 0
    L
4.4.72 Jun, 2026
  • 1
    C
  • 3
    H
  • 4
    M
  • 0
    L
4.4.618 May, 2026
  • 1
    C
  • 2
    H
  • 2
    M
  • 0
    L
4.4.510 May, 2026
  • 1
    C
  • 2
    H
  • 3
    M
  • 1
    L
4.4.429 Apr, 2026
  • 1
    C
  • 2
    H
  • 3
    M
  • 1
    L
4.4.212 Mar, 2026
  • 1
    C
  • 2
    H
  • 3
    M
  • 1
    L
4.3.17 Feb, 2026
  • 1
    C
  • 2
    H
  • 2
    M
  • 1
    L