CVE-2026-102650

Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API

@nuxt/content

### Summary The `POST /__nuxt_content/:collection/query` endpoint in `@nuxt/content` accepts an attacker-controlled `sql` field from the HTTP request body and executes it against a local SQLite database after passing it through an insufficient validator (`assertSafeQuery`). The validator only blocks a small set of SQL command keywords and does not reject expensive SQLite built-in functions such as `randomblob()`, `zeroblob()`, `hex()`, or `length()`. An unauthenticated…

10. Nov 2026

Ausgewertete Quellen

• GitHub
  GHSA-xxrh-5hgg-gj4h