The Nuxt team has released Nuxt 4.5.1 and 3.21.10, along with @nuxt/devtools 3.3.1, to address eight security advisories, including a high-severity server-side remote code execution vulnerability.

Copy link to heading Vulnerabilities addressed

Copy link to heading Vercel platform protections

Vercel received advance notice of the server-side remote code execution vulnerability, GHSA-9473-5f9j-94wq , and deployed platform-wide WAF mitigations before public disclosure.

Applications deployed on Vercel are automatically protected by these mitigations, with no configuration changes required. However, do not rely on them for full protection. Upgrading to a patched version is still required.

The WAF mitigations cover only direct exploitation of the server-side RCE.…