{"vulnerability": "cve-2026-5372", "sightings": [{"uuid": "4bd50ce6-0465-4b0d-9d87-c7e2fd2bd1c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53721", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g56cs2qf35unw", "content": "CVE-2026-71315 - Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)\nCVE ID : CVE-2026-71315\n \n Published : Aug. 5, 2026, 9:16 p.m. | 33\u00a0minutes ago\n \n Description : Nuxt is an open-source web developme...", "creation_timestamp": "2026-08-05T22:14:21.904050Z"}, {"uuid": "0d550e2d-82b7-4425-848d-a2abfaf1a435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53721", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mocc5g5lzr2c", "content": "\ud83d\udfe0 CVE-2026-53721 - High (8.2)\n\nNuxt is an open-source web development framework for Vue.js. From versions 3.11.0 to before 3.21....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-53721/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T03:00:19.981471Z"}, {"uuid": "fd8931aa-1c36-4ebd-9ea5-9bd07de6a5c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53722", "type": "seen", "source": "https://gist.github.com/alon710/aedd4394e8d823981bff81789fa6dc8a", "content": "# CVE-2026-53722: CVE-2026-53722: Reflected DOM-based Cross-Site Scripting (XSS) in Nuxt \n\n> **CVSS Score:** 5.4\n> **Published:** 2026-06-16\n> **Full Report:** https://cvereports.com/reports/CVE-2026-53722\n\n## Summary\nA reflected DOM-based Cross-Site Scripting (XSS) vulnerability was identified in Nuxt's core  component. Prior to the patched versions, the component failed to validate or sanitize the target URI schemes before directly rendering them into the 'href' attribute of native HTML anchor elements. An attacker who controls the input bound to the 'to' or 'href' properties can inject executable URI schemes, such as 'javascript:' or 'data:', leading to arbitrary script execution in the context of the user's browser session.\n\n## TL;DR\nNuxt `` components prior to versions 3.21.7 and 4.4.7 fail to sanitize URL schemes, enabling DOM-based XSS when binding untrusted, attacker-controlled navigation targets.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network\n- **CVSS Score**: 5.4 (Medium)\n- **EPSS Score**: 0.00198\n- **Impact**: Reflected DOM-based Cross-Site Scripting (XSS)\n- **Exploit Status**: Proof-of-Concept (PoC)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Nuxt Framework v3 (before version 3.21.7)\n- Nuxt Framework v4 (before version 4.4.7)\n- **Nuxt**: < 3.21.7 (Fixed in: `3.21.7`)\n- **Nuxt**: >= 4.0.0, < 4.4.7 (Fixed in: `4.4.7`)\n\n## Mitigation\n\n- Upgrade the Nuxt framework to a non-vulnerable version.\n- Enforce strict URI validation on user-controlled redirect targets before routing.\n- Implement a robust Content Security Policy (CSP) restricting execution of inline scripts.\n\n**Remediation Steps:**\n1. Open your package management configuration file (package.json).\n2. Locate the 'nuxt' dependency entry.\n3. Update the version definition to '^3.21.7' for Nuxt v3 projects or '^4.4.7' for Nuxt v4 projects.\n4. Execute your package manager upgrade command (e.g., 'npm install', 'yarn install', or 'pnpm install') to retrieve and link the updated package assets.\n5. Deploy the updated application to production environments and verify that the 'sanitizeExternalHref' logic blocks any 'javascript:' injection attempts.\n\n## References\n\n- [Nuxt Security Advisory GHSA-934w-87qh-qr26](https://github.com/nuxt/nuxt/security/advisories/GHSA-934w-87qh-qr26)\n- [CVE-2026-53722 Official Record](https://www.cve.org/CVERecord?id=CVE-2026-53722)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-53722) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-16T14:21:22.000000Z"}, {"uuid": "e42d8265-0755-4c88-98e8-4dec55cad306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53721", "type": "seen", "source": "https://gist.github.com/alon710/75a8da6231b4389c07987c60b53a1e91", "content": "# CVE-2026-71315: CVE-2026-71315: Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-08-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71315\n\n## Summary\nAn security bypass vulnerability exists in Nuxt frameworks where route rules containing mixed-case characters are silently dropped during case-insensitive routing. This occurs because lookups are folded to lowercase, but keys are stored in their original casing in the route-matching trie. As a result, critical authorization middleware, such as appMiddleware, is bypassed, allowing unauthorized access to restricted pages.\n\n## TL;DR\nNuxt route rules are silently bypassed for mixed-case paths due to a key-matching case mismatch, allowing unauthenticated attackers to skip authorization checks.\n\n## Technical Details\n\n- **CWE ID**: CWE-178 / CWE-863\n- **Attack Vector**: Network (AV:N)\n- **CVSS Severity**: 8.2 (High)\n- **Exploit Status**: No public PoC or active exploitation\n- **Impact**: Authorization Bypass & Data Disclosure\n- **Vulnerable Component**: Nuxt Route Rules Matcher\n\n## Affected Systems\n\n- Nuxt Framework\n- **Nuxt**: >= 3.21.7, < 3.21.10 (Fixed in: `3.21.10`)\n- **Nuxt**: >= 4.4.7, < 4.5.1 (Fixed in: `4.5.1`)\n\n## Mitigation\n\n- Upgrade Nuxt framework\n- Normalize routeRules to lowercase\n- Enable router.options.sensitive\n- Implement component-level auth guards\n\n**Remediation Steps:**\n1. Identify administrative or sensitive routes protected via routeRules.\n2. Update Nuxt dependency in package.json to ^3.21.10 or ^4.5.1.\n3. Verify and convert existing routeRules keys to lowercase as a defense-in-depth measure.\n4. Run npm install or yarn install to apply the framework updates.\n\n## References\n\n- [GitHub Security Advisory GHSA-hxvh-4h3w-prp9](https://github.com/nuxt/nuxt/security/advisories/GHSA-hxvh-4h3w-prp9)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71315) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-06T05:31:22.251164Z"}, {"uuid": "c953a31c-4031-44e4-9ad6-7adbda60261c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53729", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3qpdpbgf2l", "content": "CVE-2026-53729 - DataEase ExportCenter IDOR allows cross-user export task access\nCVE ID : CVE-2026-53729\n \n Published : July 7, 2026, 9:17 p.m. | 1\u00a0hour, 57\u00a0minutes ago\n \n Description : DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, any auth...", "creation_timestamp": "2026-07-07T23:22:37.923584Z"}, {"uuid": "e98b45a9-933b-4bb1-a35a-0b32029bacf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53727", "type": "published-proof-of-concept", "source": "https://github.com/premailer/css_parser/security/advisories/GHSA-9pmc-p236-855h", "content": "", "creation_timestamp": "2026-07-09T14:35:05.696751Z"}, {"uuid": "7a08111e-404f-407c-9721-ef1906040153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53727", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquydfuuou2q", "content": "CVE-2026-53727 - css_parser: SSRF and Local File Disclosure in `CssParser::Parser#read_remote_file`\nCVE ID : CVE-2026-53727\n \n Published : July 17, 2026, 9:17 p.m. | 2\u00a0hours, 21\u00a0minutes ago\n \n Description : css_parser is a Ruby CSS parser. From 2.2.0 until 3.0.0, CssParser::Pa...", "creation_timestamp": "2026-07-18T00:15:40.920738Z"}]}