NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images, CVE-2026-39669

CVE, Research URL: CVE-2026-39669
Home page URL: Security reports for NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images
Application: NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images
Published on: Apr 08, 2026
Research Description: Missing Authorization vulnerability in NitroPack NitroPack nitropack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NitroPack: from n/a through <= 1.19.3.
Affected versions: max 1.19.3.
Status: vulnerable

NitroPack – Cache &amp; Speed Optimization for Core Web Vitals, Defer CSS &amp; JavaScript, Lazy load Images, CVE-2026-39669