Skip to content

Commit 42ff975

Browse files
chargomeclaude
andcommitted
fix(deps): bump nuxt to 3.21.2 and @nuxt/nitro-server to ^3.21.2 to fix h3 CVE
Fixes Dependabot alerts #1221 and #1222. Bumps nuxt from 3.17.7 to 3.21.2 and @nuxt/nitro-server from ^3.21.1 to ^3.21.2 to pull in h3 >=1.15.6, fixing SSE injection (CVE-2026-33128) and path traversal vulnerabilities. Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
1 parent 70387b5 commit 42ff975

File tree

2 files changed

+1259
-865
lines changed

2 files changed

+1259
-865
lines changed

packages/nuxt/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -60,9 +60,9 @@
6060
},
6161
"devDependencies": {
6262
"@nuxt/module-builder": "^0.8.4",
63-
"@nuxt/nitro-server": "^3.21.1",
63+
"@nuxt/nitro-server": "^3.21.2",
6464
"nuxi": "^3.25.1",
65-
"nuxt": "3.17.7",
65+
"nuxt": "3.21.2",
6666
"vite": "^5.4.11"
6767
},
6868
"scripts": {

0 commit comments

Comments
 (0)