Nuxt Nuxt/webpack-builder — known CVE vulnerabilities

Every CVE whose affected-product data names Nuxt Nuxt/webpack-builder, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-49993 — CVSS 5.7 (medium): Nuxt is an open-source web development framework for Vue.js. In @nuxt/rspack-builder and @nuxt/webpack-builder from versions 3.15.4 to…
• CVE-2026-45670 — CVSS 5.4 (medium): Nuxt is an open-source web development framework for Vue.js. In @nuxt/rspack-builder and @nuxt/webpack-builder versions 3.15.4 to before…