Security Policy

Reporting a Vulnerability

To report a vulnerability, please send an email tosecurity@nuxtjs.org or submit it for a bounty viaHuntr.

All security vulnerabilities will be promptly verified and addressed.

While the discovery of new vulnerabilities is rare, we also recommend always using the latest versions of Nuxt and other dependencies by maintaining lock files (yarn.lock,package-lock.json andpnpm-lock.yaml) in order to ensure your application remains as secure as possible.