Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/%40nuxt/nitro-server@3.20.0
Typenpm
Namespace@nuxt
Namenitro-server
Version3.20.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3.21.6
Latest_non_vulnerable_version4.4.6
Affected_by_vulnerabilities
0
url VCID-saec-21rg-h7dz
vulnerability_id VCID-saec-21rg-h7dz
summary Nuxt's route middleware is not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`
references
0
reference_url https://github.com/nuxt/nuxt
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/nuxt/nuxt
1
reference_url https://github.com/nuxt/nuxt/issues/19772
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/nuxt/nuxt/issues/19772
2
reference_url https://github.com/nuxt/nuxt/pull/35092
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/nuxt/nuxt/pull/35092
3
reference_url https://github.com/advisories/GHSA-hg3f-28rg-4jxj
reference_id GHSA-hg3f-28rg-4jxj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hg3f-28rg-4jxj
4
reference_url https://github.com/nuxt/nuxt/security/advisories/GHSA-hg3f-28rg-4jxj
reference_id GHSA-hg3f-28rg-4jxj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/nuxt/nuxt/security/advisories/GHSA-hg3f-28rg-4jxj
fixed_packages
0
url pkg:npm/%40nuxt/nitro-server@3.21.6
purl pkg:npm/%40nuxt/nitro-server@3.21.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540nuxt/nitro-server@3.21.6
1
url pkg:npm/%40nuxt/nitro-server@4.4.6
purl pkg:npm/%40nuxt/nitro-server@4.4.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540nuxt/nitro-server@4.4.6
aliases CVE-2026-47200, GHSA-hg3f-28rg-4jxj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-saec-21rg-h7dz
1
url VCID-yfu7-eq2g-kkfw
vulnerability_id VCID-yfu7-eq2g-kkfw
summary Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning
references
0
reference_url https://github.com/nuxt/nuxt
reference_id
reference_type
scores
0
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/nuxt/nuxt
1
reference_url https://github.com/nuxt/nuxt/pull/35077
reference_id
reference_type
scores
0
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/nuxt/nuxt/pull/35077
2
reference_url https://github.com/advisories/GHSA-g8wj-3cr3-6w7v
reference_id GHSA-g8wj-3cr3-6w7v
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-g8wj-3cr3-6w7v
3
reference_url https://github.com/nuxt/nuxt/security/advisories/GHSA-g8wj-3cr3-6w7v
reference_id GHSA-g8wj-3cr3-6w7v
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/nuxt/nuxt/security/advisories/GHSA-g8wj-3cr3-6w7v
fixed_packages
0
url pkg:npm/%40nuxt/nitro-server@3.21.6
purl pkg:npm/%40nuxt/nitro-server@3.21.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540nuxt/nitro-server@3.21.6
1
url pkg:npm/%40nuxt/nitro-server@4.4.6
purl pkg:npm/%40nuxt/nitro-server@4.4.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540nuxt/nitro-server@4.4.6
aliases CVE-2026-46342, GHSA-g8wj-3cr3-6w7v
risk_score 1.4
exploitability 0.5
weighted_severity 2.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yfu7-eq2g-kkfw
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/%2540nuxt/nitro-server@3.20.0