nitrojs

Products

ProductCVEsExploitedLatest
nitro2–May 13, 2026
nitropack2–May 13, 2026

Exploited and recent CVEs

  • CVE-2026-44372 Medium 5.3 Nitro: Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules 0.3%
  • CVE-2026-44372 Medium 5.3 Nitro: Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules 0.3%
  • CVE-2026-44373 Medium 5.3 Nitro: Proxy scope bypass via percent-encoded path traversal in `routeRules` 0.5%
  • CVE-2026-44373 Medium 5.3 Nitro: Proxy scope bypass via percent-encoded path traversal in `routeRules` 0.5%