Research1 in 10 popular npm releases needed a hotfix

nuxt@4.6.4

Wait — 4.6.3 is the safer choice for now.

Published 45 h ago; most regressions surface within 72 h.

Why this verdict

  • Published 45 h ago; most regressions surface within 72 h.Evidence
  • 1 known advisory (worst: moderate), no fixed version found on this major.Evidence

Confidence 100% · algorithm v1 · computed 2026-11-04. How verdicts work

Supply chain and security

Malware reports
None known (OSV)
Known advisories
1 known
License
MIT
Install scripts
None
Build provenance
Signed provenance
Weekly downloads
34,400
  • GHSA-vjh5-4x84-xrqpNuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive

Compatibility

No compatibility boundary is crossed: this is a patch or minor release on a stable major.

2 issues mention this version in nuxt/nuxt so far (14-day window still open). See them on GitHub

Check the official release notes below for behaviour changes before merging.

Release notes

Read the Nuxt changelog on Changes.Watch or the package page on npm for this version’s features and fixes.

New in this release

  • Adds a new `devServer.allowedHosts` configuration option.“add `devServer.allowedHosts`”

AI-extracted from the official release notes and checked against the quoted text. Read the source

Deprecations and deadlines

The maintainer has not deprecated this version on npm.

Did upgrading to 4.6.4 work for you?

Results appear once three developers have voted.

More nuxt verdicts