AIKIDO-2026-821205
@nuxt/content is vulnerable to SQL Injection
41
Medium Risk
This Affects:
@nuxt/contentTL;DR
The content query API in @nuxt/content validates client-built SQL against the shape produced by its query builder before running it on the SQLite database. The WHERE-clause validation in assertSafeQuery only rejected a small set of SQL command keywords, so SQLite function-call expressions could still pass through the filter. An attacker sending crafted query conditions to the content query endpoint can bypass the intended validation to inject function calls, enabling query manipulation and resource-intensive expressions against the backing database. The fix strips known safe parenthesized groups after WHERE/AND/OR/IN and rejects any remaining function-call patterns, including quoted and bracketed identifier forms.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
@nuxt/content is vulnerable to SQL Injection in versions 3.0.1 - 3.15.1.
How to fix this
Upgrade the @nuxt/content library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant