File and Path Handling

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Path Traversal: '../filedir' in Nuxt DevtoolsCVE-2024-23657nuxt · CVSS 8.8 · 1.2% likely

   CWE-24

2. Nuxt dev server serves files from a parent directory that contains a lockfileCVE-2026-128070nuxt · CVSS 5.9 · 0.4% likely

   CWE-552

3. Nuxt Client-Side Path Traversal in Nuxt Island Payload RevivalCVE-2025-59414nuxt · CVSS 3.1 · 0.4% likely

   CWE-22

4. Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routesCVE-2026-119200nuxt · CVSS 6.5 · 0.3% likely

   CWE-41

5. Nuxt dev server arbitrary file read through client error reportsCVE-2026-119198nuxt · CVSS 5.9 · 0.3% likely

   CWE-73

6. Nuxt dev server exposes generated appSecret through Vite file servingCVE-2026-119201nuxt · CVSS 4.8 · 0.2% likely

   CWE-552

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.