●Change8

Migrating to Nuxt v3.21.10

Version v3.21.10 introduces 4 breaking changes. This guide details how to update your code.

Released: 7/27/2026

4
Breaking Changes
1
Migration Steps
19
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

nuxtvitenitrokitschemarspackwebpackuseAsyncDatauseRouteNuxtLinkuseFetchpages:extendapp.buildAssetsDirisland propsserver island propsroute rulesserver componentsdev server@nuxt/devtools

Breaking Changes

●Issue #1

Server-side RCE and unauthorized component instantiation via server island props are fixed. This may break existing implementations that relied on these vulnerabilities.

●Issue #2

Route rule authorization bypass is fixed. This may break existing implementations that relied on unauthorized access.

●Issue #3

Server component DoS is fixed. This may break existing implementations that exploited this vulnerability.

●Issue #4

Dev server path disclosure is fixed. This may break existing implementations that relied on this disclosure.

Migration Steps

  1. 1
    Run `npx nuxt upgrade --dedupe` to upgrade Nuxt and its dependencies, including `@nuxt/devtools`.

Release Summary

This is a critical security release addressing server-side RCE, unauthorized component instantiation, route rule bypass, server component DoS, and dev server path disclosure. It also includes fixes for various bugs and improvements to development tooling.

Need More Details?

View the full release notes and all changes for Nuxt v3.21.10.

View Full Changelog