Nuxt is a free and open-source framework with an intuitive and extendable way to create type-safe, performant and production-grade full-stack web applications and websites with Vue.js.
92%
Total Score
healthy
Frequent releases, active development, provenance, and a healthy repository make Nuxt 4.6.1 a strong dependency.
All health scores are okay.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-295422 nuxt is vulnerable to Information Disclosure in versions 4.4.7 - 4.5.0 and 3.21.7 - 3.21.9. | 3.21.7 - 3.21.94.4.7 - 4.5.0 | Low |
AIKIDO-2026-483885 nuxt is vulnerable to Sensitive Information Disclosure in versions 4.4.0 - 4.5.0. | 4.4.0 - 4.5.0 | High |
AIKIDO-2026-858072 nuxt is vulnerable to Improper Input Validation in versions 3.1.0 - 3.21.9 and 4.0.0 - 4.5.0. | 3.1.0 - 3.21.94.0.0 - 4.5.0 | Medium |
AIKIDO-2026-988874 nuxt is vulnerable to Denial of Service (DoS) in versions 3.1.0 - 3.21.9 and 4.0.0 - 4.5.0. | 3.1.0 - 3.21.94.0.0 - 4.5.0 | High |
AIKIDO-2026-174775 nuxt is vulnerable to Improper Handling of Case Sensitivity in versions 3.21.7 - 3.21.9 and 4.4.7 - 4.5.0. | 3.21.7 - 3.21.94.4.7 - 4.5.0 | High |
| Dependency | Last Release | Score |
|---|---|---|
ufo Version ^1.6.4 | — | — |
vue Version ^3.5.43 | — | — |
defu Version ^6.1.7 | — | — |
errx Version ^0.2.2 | — | — |
jiti Version ^2.7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.