{"vulnerability": "cve-2026-7131", "sightings": [{"uuid": "d10dfb20-910f-40e2-b293-18ab9af4336c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71319", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msv7rv7z6f2m", "content": "CVE-2026-71319 lets attackers run arbitrary commands via unauthenticated Nuxt DevTools RPC. CVSS 9.6, 7.3M monthly downloads. Patch now.\n\n#Nuxt #VueJS #CVE #RCE #CyberSecurity", "creation_timestamp": "2026-08-12T13:19:26.898577Z"}, {"uuid": "47304772-b3a5-44b5-8514-78df372d7578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71314", "type": "seen", "source": "https://gist.github.com/alon710/ea06609eb056fc8864effae3b0dc1b95", "content": "# CVE-2026-71314: CVE-2026-71314: Out-of-Memory Denial of Service via Unbounded v-for Expansion in Nuxt Server Islands\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-08-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71314\n\n## Summary\nAn unauthenticated remote denial of service (DoS) vulnerability exists in Nuxt's server component ('island') rendering mechanism. Due to a deterministic signature generation scheme and missing input constraints on server-side v-for directive expansion, an attacker can trigger unconstrained memory allocations on the hosting Node.js server, leading to immediate process crash.\n\n## TL;DR\nUnauthenticated remote attackers can crash Nuxt applications via a single crafted request that exploits unbounded loop expansion in server components.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network\n- **CVSS Score**: 7.5\n- **Impact**: Availability (Denial of Service)\n- **Exploit Status**: poc\n- **CISA KEV Status**: No\n\n## Affected Systems\n\n- Nuxt web applications utilizing Server Components (Islands)\n- **Nuxt**: >= 3.1.0, < 3.21.10 (Fixed in: `3.21.10`)\n- **Nuxt**: >= 4.0.0, < 4.5.1 (Fixed in: `4.5.1`)\n\n## Mitigation\n\n- Upgrade Nuxt to version 3.21.10 or 4.5.1\n- Disable experimental server component islands in nuxt.config.ts if unused\n- Apply reverse proxy or WAF request body size limits of 64KB on island endpoints\n- Implement strict rate limiting on the /__nuxt_island/ URL pattern\n\n**Remediation Steps:**\n1. Audit package.json to identify the active Nuxt version in the project.\n2. Execute the update package manager command: npm install nuxt@3.21.10 (or yarn/pnpm equivalent).\n3. Verify the configuration of componentIslands in nuxt.config.ts and disable if unnecessary.\n4. Deploy and verify reverse proxy request restriction policies in staging prior to production push.\n\n## References\n\n- [GitHub Security Advisory GHSA-hxcr-hm88-mpq6](https://github.com/nuxt/nuxt/security/advisories/GHSA-hxcr-hm88-mpq6)\n- [Nuxt Release 3.21.10](https://github.com/nuxt/nuxt/releases/tag/v3.21.10)\n- [Nuxt Release 4.5.1](https://github.com/nuxt/nuxt/releases/tag/v4.5.1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71314) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-05T21:31:30.582239Z"}, {"uuid": "a81b1c48-27f7-430a-b47b-61f0d0d66de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71314", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msejmrvz752z", "content": "\ud83d\udfe0 CVE-2026-71314 - High (7.5)\n\nNuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71314/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-05T22:00:17.843186Z"}, {"uuid": "0509198f-3244-4996-8a66-3decb6041e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71315", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msejmylyml2t", "content": "\ud83d\udfe0 CVE-2026-71315 - High (8.2)\n\nNuxt is an open-source web development framework for Vue.js. From 3.21.7 until 3.21.10 and 4.5.1,...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71315/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-05T22:00:24.495158Z"}, {"uuid": "71665d5f-ed58-4d11-8fd6-b4c60773fbf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71312", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msejoydgl52z", "content": "\ud83d\udfe0 CVE-2026-71312 - High (8)\n\nrclone is a command-line program to sync files and directories to and from different cloud storag...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71312/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-05T22:01:31.561012Z"}, {"uuid": "87682d55-8fdf-4add-a3e5-67ae199a16ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71315", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g56cs2qf35unw", "content": "CVE-2026-71315 - Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)\nCVE ID : CVE-2026-71315\n \n Published : Aug. 5, 2026, 9:16 p.m. | 33\u00a0minutes ago\n \n Description : Nuxt is an open-source web developme...", "creation_timestamp": "2026-08-05T22:14:21.848523Z"}, {"uuid": "01e0e07e-2d95-4fe6-a943-b3de9767684d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71319", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msekiznbnx2z", "content": "CVE-2026-71319 - devtools\nNuxt DevTools, used in development mode, exposes a vulnerable channel that allows attackers to execute arbitrary commands on the developer's machine. This can happen if an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#devtools #nuxt #npm #CVE #infosec", "creation_timestamp": "2026-08-05T22:16:04.613962Z"}, {"uuid": "c8267b0a-2477-48ac-bfe6-7c0eb03f938b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71318", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dvfbxx3u4bdfr", "content": "CVE-2026-71318 - Nuxt: Unauthorized Component Instantiation via Server Island Props\nCVE ID : CVE-2026-71318\n \n Published : Aug. 5, 2026, 9:21 p.m. | 44\u00a0minutes ago\n \n Description : Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1,...", "creation_timestamp": "2026-08-05T22:20:21.796155Z"}, {"uuid": "4ce8bac2-17cc-4d1d-8752-65a7f97718f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71319", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3fsizpdnyrbkp", "content": "CVE-2026-71319 - Nuxt.js Unauthenticated WebSocket RPC Call Leading to Remote Code Execution\nCVE ID : CVE-2026-71319\n \n Published : Aug. 5, 2026, 9:26 p.m. | 39\u00a0minutes ago\n \n Description : Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTo...", "creation_timestamp": "2026-08-05T22:26:22.080356Z"}, {"uuid": "1a3a572c-5003-426d-8113-193b69d34d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71313", "type": "published-proof-of-concept", "source": "https://github.com/rclone/rclone/security/advisories/GHSA-7p4m-qxvv-g567", "content": "", "creation_timestamp": "2026-08-05T22:35:14.248053Z"}, {"uuid": "8e90b206-f73f-45c1-89ca-242f6bc517f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71312", "type": "published-proof-of-concept", "source": "https://github.com/rclone/rclone/security/advisories/GHSA-2m8m-jhrm-w6j2", "content": "", "creation_timestamp": "2026-08-05T22:35:21.823127Z"}, {"uuid": "e8a191e2-50be-4559-bfce-4fb562c21bc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71311", "type": "published-proof-of-concept", "source": "https://github.com/rclone/rclone/security/advisories/GHSA-8c48-q9wj-3w37", "content": "", "creation_timestamp": "2026-08-05T22:35:25.046954Z"}, {"uuid": "509d5b9d-e457-4ef7-a394-c73627fc1fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71310", "type": "published-proof-of-concept", "source": "https://github.com/rclone/rclone/security/advisories/GHSA-xhf4-832v-7xcr", "content": "", "creation_timestamp": "2026-08-05T22:35:36.333516Z"}, {"uuid": "0e24e0ca-d8b8-4fa1-acbc-e28234a1499c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71319", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msemzkir372n", "content": "\ud83d\udd34 CVE-2026-71319 - Critical (9.6)\n\nNuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools (devel...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71319/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-05T23:01:06.968922Z"}, {"uuid": "de0f67df-ac4e-4255-9a63-d477a0de9ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71316", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mseqdchgvo2t", "content": "\ud83d\udfe0 CVE-2026-71316 - High (7.5)\n\nNuxt is an open-source web development framework for Vue.js. From 4.4.0 until 4.5.1, runtime cach...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71316/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-06T00:00:30.424478Z"}, {"uuid": "ec75bd3c-3334-43dc-b567-b41599dd9886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71319", "type": "seen", "source": "https://gist.github.com/alon710/a043326ccca63ec501e83cde63d8a11d", "content": "# CVE-2026-71319: CVE-2026-71319: Remote Code Execution via Unauthenticated RPC in Nuxt DevTools\n\n> **CVSS Score:** 9.6\n> **Published:** 2026-08-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71319\n\n## Summary\nAn unauthenticated remote code execution (RCE) vulnerability exists in Nuxt DevTools prior to version 3.3.1. The vulnerability arises from an unauthenticated RPC channel exposed over the Vite Hot Module Replacement (HMR) WebSocket server, allowing an attacker to modify file editor configurations and execute arbitrary commands under the server context.\n\n## TL;DR\nNuxt DevTools before 3.3.1 allows unauthenticated remote attackers to execute arbitrary shell commands via exposed WebSocket RPC endpoints.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94 / CWE-306\n- **Attack Vector**: Network\n- **CVSS Score**: 9.6\n- **Exploit Status**: Proof of Concept (PoC)\n- **CISA KEV Status**: Not Listed\n- **Ransomware Association**: No\n\n## Affected Systems\n\n- Nuxt DevTools\n- **Nuxt DevTools (@nuxt/devtools)**: < 3.3.1 (Fixed in: `3.3.1`)\n\n## Mitigation\n\n- Upgrade @nuxt/devtools to version 3.3.1 or higher.\n- Disable Nuxt DevTools completely if upgrading is not immediately possible.\n- Restrict bound network interfaces to localhost/loopback address.\n\n**Remediation Steps:**\n1. Identify vulnerable package configurations in package.json or lock files.\n2. Run package manager update command: `npm update @nuxt/devtools` or `pnpm update @nuxt/devtools`.\n3. Verify the installed version is 3.3.1 or later.\n4. If updates are blocked, edit `nuxt.config.ts` to set `devtools: { enabled: false }`.\n\n## References\n\n- [GitHub Security Advisory GHSA-279x-mwfv-vcqv](https://github.com/nuxt/nuxt/security/advisories/GHSA-279x-mwfv-vcqv)\n- [Fix Commit in Nuxt DevTools Repository](https://github.com/nuxt/devtools/commit/a7b2718b930766e1ffb0640259d53f5b041a50b4)\n- [Nuxt DevTools v3.3.1 Release Notes](https://github.com/nuxt/devtools/releases/tag/v3.3.1)\n- [CVE-2026-71319 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-71319)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71319) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-06T02:32:30.654950Z"}, {"uuid": "1749b655-5f0d-4e56-a8e8-5c693d7a8125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71319", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msf2fodwl427", "content": "Nuxt DevTools before 3.3.1 faces a CRITICAL code injection risk \u2014 unauthenticated RPC over Vite HMR WebSocket enables code execution on dev machines. Upgrade to 3.3.1. Details: https://radar.offseq.com/threat/cve-2026-71319-cwe-94-improper-control-of-generation-of-code-code-injection-in-nuxt-devt...", "creation_timestamp": "2026-08-06T03:00:32.553628Z"}, {"uuid": "1830a86e-099c-40b8-9056-9c6d2fb811cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71319", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117046328005501280", "content": "Nuxt DevTools <3.3.1 is affected by CVE-2026-71319 (CRITICAL). Unauthenticated Vite HMR WebSocket RPC lets attackers execute arbitrary code via updateOptions() & openInEditor(). Patch to 3.3.1 ASAP. https://radar.offseq.com/threat/cve-2026-71319-cwe-94-improper-control-of-generation-of-code-code-injection-in-nuxt-devtools-d2e93c140a0d8a9f #OffSeq #NuxtJS #CVE202671319 #infosec", "creation_timestamp": "2026-08-06T03:00:33.500480Z"}, {"uuid": "53752b4e-7835-4b7e-b7ea-117344f3948f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71318", "type": "seen", "source": "https://gist.github.com/alon710/3d7b500e615305ceff4644e15070fc7a", "content": "# CVE-2026-71318: CVE-2026-71318: Unauthorized Component Instantiation via Nuxt Server Island Props\n\n> **CVSS Score:** 4.8\n> **Published:** 2026-08-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71318\n\n## Summary\nCVE-2026-71318 is a vulnerability in Nuxt where unauthenticated remote attackers can trigger unauthorized component instantiation and arbitrary HTML element injection. This security flaw is caused by default attribute inheritance (fallthrough) combined with polymorphic root components inside island components accessible via the /__nuxt_island/ endpoint. Attackers can bypass standard routing checks to instantiate globally registered components or inject raw HTML tags like iframes. This vector is highly reachable since it does not require enabling the vue.runtimeCompiler option. It is patched in Nuxt versions 3.21.10 and 4.5.1.\n\n## TL;DR\nUnauthenticated remote attackers can inject arbitrary HTML elements or instantiate globally-registered Vue components via the /__nuxt_island/ endpoint by exploiting attribute fallthrough on polymorphic root elements.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-20\n- **Attack Vector**: Network\n- **CVSS v3.1**: 4.8 (Medium)\n- **EPSS Score**: N/A\n- **Impact**: HTML Injection / Component Hijacking\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Nuxt applications utilizing Server Islands with polymorphic root components\n- **nuxt**: >= 3.1.0, < 3.21.10 (Fixed in: `3.21.10`)\n- **nuxt**: >= 4.0.0, < 4.5.1 (Fixed in: `4.5.1`)\n\n## Mitigation\n\n- Upgrade Nuxt to fixed versions (3.21.10+ / 4.5.1+)\n- Disable attribute inheritance (inheritAttrs: false) in server-side components\n- Enforce strict allowlists for dynamic components instead of raw client strings\n- Avoid globally registering sensitive UI components\n\n**Remediation Steps:**\n1. Identify all server-side island components in the project matching *.server.vue.\n2. Inspect the package.json and update nuxt to either 3.21.10 or 4.5.1 depending on your version track.\n3. Examine island templates for polymorphic components or elements bound via v-bind.\n4. Implement inheritAttrs: false within island components to prevent implicit attribute fallthrough.\n5. Verify that dynamic component bindings () resolve exclusively against a predefined list of allowed tags.\n\n## References\n\n- [GitHub Security Advisory GHSA-48hr-524c-v5w3](https://github.com/nuxt/nuxt/security/advisories/GHSA-48hr-524c-v5w3)\n- [Nuxt v3.21.10 Release Notes](https://github.com/nuxt/nuxt/releases/tag/v3.21.10)\n- [Nuxt v4.5.1 Release Notes](https://github.com/nuxt/nuxt/releases/tag/v4.5.1)\n- [NVD Record for CVE-2026-71318](https://nvd.nist.gov/vuln/detail/CVE-2026-71318)\n- [CVE.org Record for CVE-2026-71318](https://www.cve.org/CVERecord?id=CVE-2026-71318)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71318) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-06T03:31:34.765824Z"}, {"uuid": "d0ef831e-d748-4b66-b5ab-592833da42af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71316", "type": "seen", "source": "https://gist.github.com/alon710/a33e8f1d3990c5613ef07342bcfbda1b", "content": "# CVE-2026-71316: CVE-2026-71316: Information Disclosure and Authorization Bypass in Nuxt Runtime Payload Caching\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-08-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71316\n\n## Summary\nCVE-2026-71316 is a high-severity vulnerability affecting the Nuxt web development framework in versions 4.4.0 up to (but excluding) 4.5.1. Due to the lack of runtime isolation in the shared server runtime storage driver, unauthenticated remote attackers can query the static-like JSON representation of a route's server-side rendered (SSR) state (_payload.json) and bypass configured page guards and application middleware to obtain highly sensitive user session records.\n\n## TL;DR\nNuxt version 4.4.0 introduced runtime payload caching across a globally shared storage keyspace. Because cache keys are derived strictly from the request path and are evaluated prior to route middleware execution, unauthenticated attackers can retrieve cached SSR payload files containing the private hydrated state of authorized users.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-524, CWE-862\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1**: 7.5 (High)\n- **EPSS Score**: Not Assigned\n- **Vulnerability Impact**: Information Disclosure & Authorization Bypass\n- **Exploit Status**: Proof-of-Concept / Technical Analysis Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Nuxt Web Framework\n- **Nuxt**: >= 4.4.0, < 4.5.1 (Fixed in: `4.5.1`)\n\n## Mitigation\n\n- Disable Runtime Payload Extraction in Nuxt configuration.\n- Avoid applying hybrid caching rules (SWR/ISR) on user-specific or authenticated endpoints.\n- Set aggressive reverse-proxy / CDN rules to block or validate authentication for any file paths ending in _payload.json.\n\n**Remediation Steps:**\n1. Run 'npm install nuxt@4.5.1' or your package manager's equivalent command to upgrade dependencies.\n2. Clear any active runtime payload caches using the target server storage CLI tools or cache adapters.\n3. Execute a hard invalidation and purge across all CDN nodes (e.g. Cloudflare, CloudFront) to delete stale _payload.json cache slices.\n\n## References\n\n- [GitHub Security Advisory GHSA-wm8w-6qjm-cv43](https://github.com/nuxt/nuxt/security/advisories/GHSA-wm8w-6qjm-cv43)\n- [Fix Commit](https://github.com/nuxt/nuxt/commit/ac9b41a36b62296a117862254ee7d2b21a2a5203)\n- [Nuxt v4.5.1 Release](https://github.com/nuxt/nuxt/releases/tag/v4.5.1)\n- [CVE.org Authority Record](https://www.cve.org/CVERecord?id=CVE-2026-71316)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71316) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-06T04:31:21.648858Z"}, {"uuid": "7449398f-c141-4a36-bef7-246688aa4e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71315", "type": "seen", "source": "https://gist.github.com/alon710/75a8da6231b4389c07987c60b53a1e91", "content": "# CVE-2026-71315: CVE-2026-71315: Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-08-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71315\n\n## Summary\nAn security bypass vulnerability exists in Nuxt frameworks where route rules containing mixed-case characters are silently dropped during case-insensitive routing. This occurs because lookups are folded to lowercase, but keys are stored in their original casing in the route-matching trie. As a result, critical authorization middleware, such as appMiddleware, is bypassed, allowing unauthorized access to restricted pages.\n\n## TL;DR\nNuxt route rules are silently bypassed for mixed-case paths due to a key-matching case mismatch, allowing unauthenticated attackers to skip authorization checks.\n\n## Technical Details\n\n- **CWE ID**: CWE-178 / CWE-863\n- **Attack Vector**: Network (AV:N)\n- **CVSS Severity**: 8.2 (High)\n- **Exploit Status**: No public PoC or active exploitation\n- **Impact**: Authorization Bypass & Data Disclosure\n- **Vulnerable Component**: Nuxt Route Rules Matcher\n\n## Affected Systems\n\n- Nuxt Framework\n- **Nuxt**: >= 3.21.7, < 3.21.10 (Fixed in: `3.21.10`)\n- **Nuxt**: >= 4.4.7, < 4.5.1 (Fixed in: `4.5.1`)\n\n## Mitigation\n\n- Upgrade Nuxt framework\n- Normalize routeRules to lowercase\n- Enable router.options.sensitive\n- Implement component-level auth guards\n\n**Remediation Steps:**\n1. Identify administrative or sensitive routes protected via routeRules.\n2. Update Nuxt dependency in package.json to ^3.21.10 or ^4.5.1.\n3. Verify and convert existing routeRules keys to lowercase as a defense-in-depth measure.\n4. Run npm install or yarn install to apply the framework updates.\n\n## References\n\n- [GitHub Security Advisory GHSA-hxvh-4h3w-prp9](https://github.com/nuxt/nuxt/security/advisories/GHSA-hxvh-4h3w-prp9)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71315) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-06T05:31:22.184696Z"}, {"uuid": "8272bfeb-eec9-4d5f-9744-92a4b7bb54ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71313", "type": "seen", "source": "https://gist.github.com/alon710/49b7a81d033518d9857d9b26baae89fd", "content": "# CVE-2026-71313: CVE-2026-71313: Local Directory Traversal in rclone via Unsafe Encoding Configurations\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-08-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71313\n\n## Summary\nA local encoding path traversal vulnerability exists in rclone versions from v1.51.0 up to v1.75.0. When non-default local encoding parameters (such as Slash, None, or Raw) are specified, rclone's standard decoder maps safely encoded fullwidth dot-dot characters back into native directory traversal components. Since the local backend historically lacked a post-resolution path containment check, these relative segments resolved outside the designated synchronization root, allowing arbitrary file creation and modification on the host system.\n\n## TL;DR\nIn rclone versions v1.51.0 to v1.74.x, configured local target encodings that omit dot-protection allow malicious remote filenames to escape the designated sync root and manipulate arbitrary host files.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory)\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 6.9 (Medium)\n- **Exploit Status**: PoC-level\n- **CISA KEV Status**: No\n\n## Affected Systems\n\n- rclone command-line utility (v1.51.0 through v1.74.x)\n- **rclone**: >= 1.51.0, < 1.75.0 (Fixed in: `v1.75.0`)\n\n## Mitigation\n\n- Upgrade rclone to v1.75.0 or later to enable native lexical containment checks.\n- Do not configure the local backend with custom local encoding options (such as Slash, None, or Raw) that remove standard Dot safety checks.\n- Restrict host execution context using containerization, SELinux, or AppArmor to prevent system-wide impacts from potential directory traversals.\n\n**Remediation Steps:**\n1. Scan execution systems to identify installed rclone versions between v1.51.0 and v1.74.x.\n2. Apply the patch by updating to v1.75.0 or later using official vendor sources.\n3. Audit automated configurations or scripts for occurrences of '--local-encoding Slash', '--local-encoding None', or '--local-encoding Raw' parameters.\n\n## References\n\n- [https://github.com/rclone/rclone/security/advisories/GHSA-7p4m-qxvv-g567](https://github.com/rclone/rclone/security/advisories/GHSA-7p4m-qxvv-g567)\n- [https://github.com/rclone/rclone/commit/6a69713864b1d8f6edbc03d8af735f9624576d6e](https://github.com/rclone/rclone/commit/6a69713864b1d8f6edbc03d8af735f9624576d6e)\n- [https://github.com/rclone/rclone/releases/tag/v1.75.0](https://github.com/rclone/rclone/releases/tag/v1.75.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71313) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-06T06:31:10.764819Z"}, {"uuid": "7843cf71-f0d5-4013-bc5b-97588352b9b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71312", "type": "seen", "source": "https://gist.github.com/alon710/67103eb26c8040be3d1015d9a77a7298", "content": "# CVE-2026-71312: CVE-2026-71312: OS Command Injection via Unicode Smart Quote Shell Bypass in rclone SFTP Backend\n\n> **CVSS Score:** 8.0\n> **Published:** 2026-08-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71312\n\n## Summary\nAn incomplete sanitization vulnerability exists in rclone's SFTP backend before version 1.75.0 when performing server-side hashing operations on Windows hosts. Due to PowerShell treating Unicode smart quotes as equivalent to ASCII single quotes, malicious file paths can escape command string delimiters and execute arbitrary commands on the remote system.\n\n## TL;DR\nrclone versions prior to 1.75.0 are vulnerable to remote OS command injection when executing server-side hashing on Windows SFTP targets. Attackers can leverage Unicode smart quotes in file paths to bypass single-quote sanitization and execute arbitrary PowerShell commands.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-78\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 8.0\n- **Exploit Status**: PoC / Theoretical\n- **CISA KEV Status**: Not Listed\n- **Impact**: Remote Command Execution (RCE)\n- **Remediation**: Upgrade to v1.75.0 or higher\n\n## Affected Systems\n\n- rclone installations prior to version 1.75.0 interacting with Windows-based SFTP servers using PowerShell\n- **rclone**: < 1.75.0 (Fixed in: `1.75.0`)\n\n## Mitigation\n\n- Upgrade rclone to version 1.75.0 or later\n- Reconfigure Windows SSH server to use cmd.exe instead of PowerShell as the default shell\n- Implement filename sanitization rules on the SFTP server to block Unicode smart quotes (U+2018 through U+201B)\n\n**Remediation Steps:**\n1. Identify all systems executing rclone commands against Windows SFTP servers.\n2. Update rclone installations to version 1.75.0 or higher.\n3. For systems that cannot be patched immediately, apply server-side mitigations by changing the default SSH shell to cmd.exe.\n\n## References\n\n- [GHSA-2m8m-jhrm-w6j2](https://github.com/rclone/rclone/security/advisories/GHSA-2m8m-jhrm-w6j2)\n- [Fix Commit e122fba](https://github.com/rclone/rclone/commit/e122fba1a57641b63a580aa26c026903a84e2e88)\n- [rclone v1.75.0 Release](https://github.com/rclone/rclone/releases/tag/v1.75.0)\n- [CVE-2026-71312 Record](https://www.cve.org/CVERecord?id=CVE-2026-71312)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71312) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-06T10:32:49.808053Z"}, {"uuid": "75646649-7645-4a6c-954e-d2adf9bbeda6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71311", "type": "seen", "source": "https://gist.github.com/alon710/d60715eb4915a2fe25854150e00d6548", "content": "# CVE-2026-71311: CVE-2026-71311: FTP Command Injection via Path CRLF Injection in rclone FTP Backend\n\n> **CVSS Score:** 6.4\n> **Published:** 2026-08-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71311\n\n## Summary\nA protocol-level CRLF injection vulnerability exists in rclone's FTP backend before version 1.75.0. When configured with a non-default filename encoding, rclone allows carriage return and line feed characters to pass directly into the underlying FTP client library. Because the library constructs line-oriented control commands without input validation, an attacker-controlled filename can inject arbitrary FTP commands into the session, allowing unauthorized file deletion and modification on the target server.\n\n## TL;DR\nInsecure filename encoding in rclone's FTP backend combined with lack of validation in the underlying FTP library allows attackers to inject arbitrary FTP commands via crafted filenames.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **Vulnerability Type**: CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')\n- **Attack Vector**: Network (AV:N)\n- **Attack Complexity**: High (AC:H)\n- **Privileges Required**: Low (PR:L)\n- **User Interaction**: Required (UI:R)\n- **CVSS v3.1 Score**: 6.4 (Medium)\n- **Exploit Status**: Proof of Concept / Conceptual\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- rclone versions prior to 1.75.0 utilizing the FTP backend with non-default filename encodings\n- **rclone**: < 1.75.0 (Fixed in: `1.75.0`)\n\n## Mitigation\n\n- Upgrade rclone installations to version 1.75.0 or later.\n- Remove non-default custom encoding options (such as 'None' or 'Slash') from rclone FTP backend configurations to restore default safety filters.\n- Restrict directory write privileges on the synchronization source to prevent untrusted users from introducing files with custom control characters.\n\n**Remediation Steps:**\n1. Identify all production nodes running rclone instances.\n2. Verify configuration files (typically located at ~/.config/rclone/rclone.conf) for custom 'encoding' parameters in FTP server definitions.\n3. Apply the v1.75.0 update across all systems.\n4. Verify compliance by attempting to sync a test file containing safe encoded representations of carriage returns.\n\n## References\n\n- [GitHub Security Advisory GHSA-8c48-q9wj-3w37](https://github.com/rclone/rclone/security/advisories/GHSA-8c48-q9wj-3w37)\n- [Official Patch Commit](https://github.com/rclone/rclone/commit/1df2b70753286c1dfe8366078cbedfdf7f96472c)\n- [rclone v1.75.0 Release Notes](https://github.com/rclone/rclone/releases/tag/v1.75.0)\n- [NVD CVE-2026-71311 Detail Page](https://nvd.nist.gov/vuln/detail/CVE-2026-71311)\n- [CVE.org CVE-2026-71311 Record](https://www.cve.org/CVERecord?id=CVE-2026-71311)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71311) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-06T12:31:36.736967Z"}]}