Security Research

CVE-2025-27415 Nuxt.js Cache Poisoning DoS: Newline Bypass on Route Regex

#Vulnerability Analysis#Code Audit#Web Security
CVE-2025-27415 Nuxt.js Cache Poisoning DoS: Newline Bypass on Route Regex

Nuxt.js’s Nitro route regex treats newline (\n) as a legal character — the attacker stuffs newlines and spaces into the URL, bypasses the route regex’s key extraction, and makes Nitro write an empty key into the cache. Repeated requests grow the cache without bound and exhaust server memory for DoS.

Unlock to view this content.