npm
nitro
8 known vulnerabilities · 0 critical · 0 high
GHSA-5w89-w975-hf9q
Nitro has a proxy scope bypass via percent-encoded path traversal in `routeRules`
Published May 6, 2026
GHSA-9phm-9p8f-hw5m
Nitro has an Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules
Published May 6, 2026
MAL-2022-1048
Malicious code in apinitro (npm)
Published Jun 20, 2022
MAL-2025-191133
Malicious code in nitrodeploy (npm)
Published Nov 24, 2025
MAL-2025-191132
Malicious code in nitro-kutu (npm)
Published Nov 24, 2025
MAL-2025-191131
Malicious code in nitro-graphql (npm)
Published Nov 24, 2025
MAL-2025-191134
Malicious code in nitroping (npm)
Published Nov 24, 2025
MAL-2025-3725
Malicious code in @nitro2/shared (npm)
Published May 11, 2025
Check your entire dependency tree at onceRun dependency scan →