@nuxt/ui: UAuthForm / UForm SSR markup omits `method`, leaking credentials via GET if submitted before hydration

Description

UForm and UAuthForm render a server-side <form> element with no method and no action attribute, relying on a hydrated @submit.prevent handler to intercept submission. If a user submits the form before Vue hydration has attached the handler (autofill plus Enter on a slow network, JS bundle blocked by CSP or CDN failure, etc.

Recommendation

Update the @nuxt/ui package to the latest compatible version. Followings are version details:

• Affected version(s): < 4.8.1
• Patched version(s): 4.8.1

References

• GHSA-gj2h-2fpw-fhv9
• CWE-200
• CWE-598
• OWASP 2021-A1
• OWASP 2021-A4