[GHSA] GHSA-hxcr-hm88-mpq6 (high) — Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering

GHSA-hxcr-hm88-mpq6 Severity: high CVE: CVE-2026-71314

Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering

### Impact

An unauthenticated attacker can crash a Nuxt server that renders any island / server component containing a `v-for` over a prop (for example `v-for="n in count"` or a `<slot v-for>`). Because the island URL hash is a non-secret digest of t