Skip to content

Add Nuxt fixed release references#8588

Draft
cookesan wants to merge 1 commit into
github:cookesan/advisory-improvement-8588from
cookesan:nuxt-56326-nvd-reference
Draft

Add Nuxt fixed release references#8588
cookesan wants to merge 1 commit into
github:cookesan/advisory-improvement-8588from
cookesan:nuxt-56326-nvd-reference

Conversation

@cookesan

@cookesan cookesan commented Jul 7, 2026

Copy link
Copy Markdown

Summary

  • add the Nuxt 3.21.7 and 4.4.7 fixed release references
  • keep the NVD advisory reference for CVE-2026-56326

Validation

  • confirmed the advisory aliases CVE-2026-56326 and affects the npm nuxt package
  • confirmed the advisory fixed versions are 3.21.7 and 4.4.7
  • confirmed the Nuxt v3.21.7 and v4.4.7 release URLs return HTTP 200 and identify the releases as security hotfixes
  • confirmed the v3.21.6...v3.21.7 comparison contains the referenced 3.x fix commits for navigateTo, reloadNuxtApp, and script protocol handling
  • confirmed the v4.4.6...v4.4.7 comparison contains the referenced 4.x fix commits for navigateTo, reloadNuxtApp, and script protocol handling
  • confirmed upstream PRs #35115 and #35206 are merged
  • confirmed npm has nuxt 3.21.7 and 4.4.7 package metadata with tarball integrity data
  • confirmed NVD returns CVE-2026-56326 with status Analyzed
  • ran jq empty on the advisory JSON
  • ran git diff --check

@github-actions github-actions Bot changed the base branch from main to cookesan/advisory-improvement-8588 July 7, 2026 11:08
@cookesan cookesan force-pushed the nuxt-56326-nvd-reference branch from 950dd6d to ee79eb8 Compare July 7, 2026 12:32
@cookesan cookesan changed the title Add Nuxt NVD reference Add Nuxt fixed release references Jul 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant