VYPR

content

by Nuxt

CVEs (1)

  • CVE-2026-102650HigNov 6, 2026
    risk 0.42cvss 7.5epss —

    Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components. From 3.0.0 until 3.15.2, the unauthenticated POST /__nuxt_content/:collection/query endpoint accepts an attacker-controlled sql field in src/runtime/api/query.post.ts and permits…