CVE-2026-128076 | Nuxt up to 3.x/4.6.3 nitro-server escape output

November 13, 2026 Yanac

A vulnerability was found in Nuxt up to 3.x/4.6.3. It has been classified as problematic. This vulnerability affects unknown code of the component nitro-server. Performing a manipulation results in escaping of output.

This vulnerability was named CVE-2026-128076. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More