Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients

Description

No description available.

Recommendation

Update the nuxt-ollama package to the latest compatible version. Followings are version details:

Affected version(s): >= 1.2.26, < 1.3.1
Patched version(s): 1.3.1

References

Could your website be exposed too?

SmartScanner can check your website for Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients and gives you actionable findings to investigate.

Start a free scan

Related Issues

Nuxt dev server exposes private runtime config through the Nitro dev bundle - CVE-2026-119199
Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99) - @nuxt/webpack-builder - CVE-2026-45670
Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99) - CVE-2026-45670
Nuxt dev server exposes generated appSecret through Vite file serving - CVE-2026-119201

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated September 09, 2026