Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
nuxt/framework
readme @ f8728b9
8
Fixes
38
CVEs
CRITICAL
Peak severity
Highlights
Path Traversal: 3 prior fixes. Scrutinize any change in this area.
packages/nuxt3/src/app/composables/cookie.ts: most-fixed (2 issues). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Unvalidated payload URLs containing protocols or external hosts allow attackers to trigger arbitrary script loading or path traversal during client-side execution. Developers must ensure protocol and host validations are enforced on all payload loaders.
Information Disclosure: Direct client socket requests to internal error routes can expose sensitive internal rendering context to external users. Preventing direct rendering of the internal Nuxt error page requires strict validation that the socket request did not originate externally.
Open Redirect: Link prefetching functionality that triggers payload loading on external or absolute URLs can be weaponized for open redirects or unauthorized script execution. A strict check for protocol presence on client links is vital.