Vulnerability Description
Nuxt before 4.4.7 (and the 3.x branch before 3.21.7) contains a cross-site scripting vulnerability in the NoScript component that writes slot content to innerHTML without escaping. Attackers can inject malicious scripts through untrusted data in NoScript slots, such as route.query parameters, which execute in the document context when the noscript tag is implicitly closed by script tags.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nuxt | Nuxt | < 3.21.7 |
Related Weaknesses (CWE)
References
- https://github.com/nuxt/nuxt/commit/4b054e9d95f8daf366cb144b52782047c511a66ePatch
- https://github.com/nuxt/nuxt/commit/7fea9fd687f1dacbfb63db5fae5839896b017a0ePatch
- https://github.com/nuxt/nuxt/security/advisories/GHSA-m3q2-p4fw-w38mMitigationPatchVendor Advisory
- https://www.vulncheck.com/advisories/nuxt-cross-site-scripting-via-noscript-compPatchThird Party Advisory
FAQ
What is CVE-2026-56317?
CVE-2026-56317 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Nuxt before 4.4.7 (and the 3.x branch before 3.21.7) contains a cross-site scripting vulnerability in the NoScript component that writes slot content to innerHTML without escaping. Attackers can injec...
How severe is CVE-2026-56317?
CVE-2026-56317 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-56317?
Check the references section above for vendor advisories and patch information. Affected products include: Nuxt Nuxt.