nuxt Code Injection vulnerability

CRITICAL 9.8CVE-2023-3224 · GHSA-gc34-5v43-h7v8 · Published 13/06/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
nuxt nuxt	`≥ 3.4.0, < 3.4.3`	`3.4.3`
nuxt npm	`≥ 3.4.0, < 3.4.3`	`3.4.3`

Description

he Nuxt dev server between versions 3.4.0 and 3.4.3 is vulnerable to code injection when it is exposed publicly.

NVD description

Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.