CVE-2026-128074 | Nuxt up to 4.6.3 URL Generation _payload.json resource consumption

November 13, 2026 Yanac

A vulnerability identified as problematic has been detected in Nuxt up to 4.6.3. This issue affects some unknown processing of the file _payload.json of the component URL Generation. The manipulation leads to resource consumption.

This vulnerability is listed as CVE-2026-128074. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More