Node.js Web Framework NOASSERTION Latest: v3.0.260610-beta

Nitro

Universal server engine powering Nuxt — runs anywhere

npm GitHub

Health Metrics

Project Health at a Glance

Live data from GitHub and npm, updated daily.

⭐

11.0K+98

GitHub Stars

📦

v3.0.260610-beta

Latest Release · 1 months ago

🔄

16d

Avg. Release Cadence

🐛

569

Open Issues

📅

Yesterday

Last Commit

⬇️

1.4M

Weekly Downloads

🔒

Active CVEs

Data last fetched: 2026-07-17

Security

2 active CVEs reported via OSV.dev

GHSA-5w89-w975-hf9q CVSS_V3

Nitro has a proxy scope bypass via percent-encoded path traversal in `routeRules`

Published: 2026-05-06 Fixed in: 3.0.260429-beta

GHSA-9phm-9p8f-hw5m CVSS_V3

Nitro has an Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules

Published: 2026-05-06 Fixed in: 3.0.260429-beta

Ecosystem

Other Web Framework projects in the Node.js ecosystem worth evaluating.

Get Help

Get SLA-backed support, security patches, and direct access to senior engineers for Nitro — without relying on volunteer maintainers.

Talk to an Expert →