Nuxt Vite-Builder vulnerabilities

1 known vulnerability affecting nuxt/vite-builder.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2025-24360MEDIUM≥ 3.8.1, < 3.15.32025-01-27

CVE-2025-24360 [MEDIUM] CWE-200 Opening a malicious website while running a Nuxt dev server could allow read-only access to code Opening a malicious website while running a Nuxt dev server could allow read-only access to code ### Summary Nuxt allows any websites to send any requests to the development server and read the response due to default CORS settings. ### Details While Vite patched the default CORS settings to fix https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6,