Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 18:47:47 +0000 CVE-2026-71314 — Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering https://cve.radiocsirt.org/vuln/cve-2026-71314 <p><strong>Affected:</strong> nuxt</p> <p>Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an unauthenticated attacker can use a server island v-for prop, including vforToArray and , to trigger unbounded SSR memory allocation until MAX_VFOR_LENGTH = 100000 and crash the Nuxt process. This issue is fixed in 3.21.10 and 4.5.1.</p> <p><strong>Affected:</strong> nuxt</p> <p>Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an unauthenticated attacker can use a server island v-for prop, including vforToArray and , to trigger unbounded SSR memory allocation until MAX_VFOR_LENGTH = 100000 and crash the Nuxt process. This issue is fixed in 3.21.10 and 4.5.1.</p> https://cve.radiocsirt.org/vuln/cve-2026-71314