Nuxt July 2026 security advisory

Event type: SecurityPrimary topic: Security Also: Web Frameworks Also: Developer Tools

First reported JUL 27, 2026 · 00:00 UTC · 3mo ago · 1 source

Crest summary — written by AI from the 1 source below; every figure is checked against them · model deepseek-chat

Summary

The Nuxt team released Nuxt 4.5.1 and 3.21.10, plus @nuxt/devtools 3.3.1, fixing eight security advisories including a high-severity server-side remote code execution flaw.

Key facts

Nuxt 4.5.1 and 3.21.10 were released on 2026-07-27.
@nuxt/devtools 3.3.1 was also released.
Eight security advisories were addressed.
One advisory covers a high-severity server-side remote code execution vulnerability.

Why it matters

Projects running affected Nuxt versions should upgrade to the patched releases, since the server-side remote code execution flaw is rated high severity.

Companies

Nuxt

Technologies

Nuxtframework
@nuxt/devtools 3.3.1product

Original sources (1)

The report this event was built from. Crest of Tech keeps no article bodies: the full text is at each source.

VercelOfficial · Primary
Nuxt July 2026 security advisoryJUL 27, 2026 · 00:00 UTC · By Daniel Roe
Read at Vercel