Migrating to Nuxt v4.5.1
Version v4.5.1 introduces 6 breaking changes. This guide details how to update your code.
Released: 7/27/2026
⚠️ Check Your Code
If you use any of these symbols, you need to read this guide:
nitronuxtrspackwebpackkitschemaviteh3vue-router@unhead/vueBreaking Changes
●Issue #1
If you use the `cache`, `swr` or `isr` route rules, purge any CDN or edge cache after upgrading; a leaked `_payload.json` may already be cached upstream.
●Issue #2
Server-side RCE and unauthorized component instantiation via server island props are fixed. This may break existing implementations that relied on these vulnerabilities.
●Issue #3
Route rule authorization bypass is fixed. This may break existing implementations that relied on unauthorized access.
●Issue #4
Server component DoS is fixed. This may break existing implementations that relied on this DoS vector.
●Issue #5
Cross-user payload disclosure on cached pages is fixed. This may break existing implementations that relied on this disclosure.
●Issue #6
Dev server path disclosure is fixed. This may break existing implementations that relied on this disclosure.
Migration Steps
- 1If you use the `cache`, `swr` or `isr` route rules, purge any CDN or edge cache after upgrading.
Release Summary
This security release addresses critical vulnerabilities including server-side RCE, unauthorized component instantiation, route rule authorization bypass, server component DoS, cross-user payload disclosure, and dev server path disclosure. It also includes performance improvements and various bug fixes.
Need More Details?
View the full release notes and all changes for Nuxt v4.5.1.
View Full Changelog