Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
nuxt @nuxt/schema may let attackers run code
published 19 days ago
Summary
The @nuxt/schema component used in Nuxt projects contains a flaw that could allow an attacker to execute malicious code. This poses a risk to any website or application that relies on this package. Updating to version 3.12.4‑tuxcare.8 resolves the issue.
What to do
- Update nuxt @nuxt/schema to version 3.12.4-tuxcare.8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | nuxt | @nuxt/schema |
>= 3.12.4-tuxcare.0, < 3.12.4-tuxcare.8 Fix: upgrade to 3.12.4-tuxcare.8
|
Original advisory text
TuxCare security update for @nuxt/schema (1 CVE)
TuxCare rebuilt @nuxt/schema to address 1 CVE. Fixed in 3.12.4-tuxcare.8.
Timeline
Published16 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2026-1792161594 · OSV
Track software like this
Free during beta