- Implemented configurable CORS origin restrictions for the dev server (Vite/Webpack/Rspack), a breaking security fix.
- Added performance optimizations, reduced unnecessary file system calls, and fixed multiple bugs across Nuxt and related packages.
- Updated documentation with new examples (useFetch, NuxtLink, navigation mode, etc.) and improved guidance.
v3.15.3
Official Nuxt changelog summary with source attribution, release tags, and community reactions.
Track this Nuxt release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Nuxt release note into a weekly digest for the tools you actually use.
Create digestMore Nuxt changelog updates
Fix island payload serialization for underscore keys and deduplicate island renders during prerender
Improved build and runtime performance with lazy imports, reused scans, and skipping unchanged files across Nuxt, Kit, and Vite.
Security release addressing server‑side RCE, unauthorized component instantiation, route rule authorization bypass, DoS, and dev server path disclosure, plus a regression fix from the prior advisory.