vulnerability in nuxt (GHSA-rq7w-g337-39qq). Risk of unauthorized operations or information disclosure. Exploitable via ``nitro.options.devHandlers``. Mitigation: upgrade to `4.4.7` or later.
vulnerability in markdown-it (CVE-2026-48988). Risk of unauthorized operations or information disclosure. Exploitable via ``token.content``. Mitigation: upgrade to `14.2.0` or later.
vulnerability in starlette (CVE-2026-54283). Risk of unauthorized operations or information disclosure. Exploitable via ``max_fields``. Mitigation: upgrade to `1.3.1` or later.
vulnerability in @opentelemetry/core (CVE-2026-54285). Risk of unauthorized operations or information disclosure. Exploitable via ``baggage``. Mitigation: upgrade to `2.8.0` or later.
vulnerability in Starlette (CVE-2026-54282). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `1.3.0` or later.
vulnerability in tornado (GHSA-pw6j-qg29-8w7f). Confidential information can be exposed externally. Exploitable via ``CurlAsyncHTTPClient``. Mitigation: upgrade to `6.5.7` or later.
vulnerability in @nestjs/platform-fastify (CVE-2026-54281). Risk of unauthorized operations or information disclosure. Exploitable via `GET /resource`. Mitigation: upgrade to `11.1.24` or later.