{"id":"ghsa-ghsa-vjh5-4x84-xrqp","seq":309549,"kind":"advisory","title":"Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive","url":"https://github.com/advisories/GHSA-vjh5-4x84-xrqp","permalink":"https://vulnpulse.app/items/ghsa-ghsa-vjh5-4x84-xrqp","summary":"影響: npm:nuxt >= 4.0.0, < 4.6.2 → 4.6.2, npm:nuxt >= 3.0.0, < 4.0.0, npm:@nuxt/nitro-server >= 4.2.0, < 4.6.2 → 4.6.2, npm:@nuxt/nitro-server >= 3.20.0, < 4.0.0\nWith the default router.options.sensitive: false, Nuxt's page router resolves routes case-insensitively, so /Admin renders the same page as /admin. On the server, however, route rules were resolved with Nitro's route-rule matcher, which matches keys case-sensitively. A request whose path differs from a rule key only in letter case therefore rendered the page with none of that rule applied. Earlier fixes ([GHSA-mm7m-92g8-7m47](https://github.com/nuxt/nuxt/security/advisories/GHSA-mm7m-92g8-7m47)…","severity":"medium","techs":["nodejs","nuxt","github"],"cves":["CVE-2026-114132"],"tags":["GHSA-vjh5-4x84-xrqp","nuxt","nuxt","@nuxt/nitro-server","@nuxt/nitro-server"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-22T16:59:55.000Z","fetched_at":"2026-10-22T20:09:55.169Z"}