ExploitedPHP2Shell is now on CISA KEV

nuxt@4.6.3

Wait — 4.6.2 is the safer choice for now.

Published 15 h ago; most regressions surface within 72 h.

Why this verdict

  • Published 15 h ago; most regressions surface within 72 h.Evidence
  • 1 known advisory (worst: moderate), no fixed version found on this major.Evidence

Confidence 100% · algorithm v1 · computed 2026-10-27. How verdicts work

Supply chain and security

Malware reports
None known (OSV)
Known advisories
1 known
License
MIT
Install scripts
None
Build provenance
Signed provenance
Weekly downloads
0
  • GHSA-vjh5-4x84-xrqpNuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive

Compatibility

No compatibility boundary is crossed: this is a patch or minor release on a stable major.

0 issues mention this version in nuxt/nuxt so far (14-day window still open). See them on GitHub

Check the official release notes below for behaviour changes before merging.

Release notes

Read the Nuxt changelog on Changes.Watch or the package page on npm for this version’s features and fixes.

Deprecations and deadlines

The maintainer has not deprecated this version on npm.

Did upgrading to 4.6.3 work for you?

Results appear once three developers have voted.

More nuxt verdicts