Description (CNA)
A vulnerability in Nuxt DevTools has been fixed in version **2.6.4***. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Vercel / Nuxt Devtools | affected 2.6.3 through 2.6.3 |
CWE
No CWE identifiers supplied.
References
- https://github.com/nuxt/devtools/commit/7cadbbe9
- https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools
ADP enrichment
No English description supplied.
No references supplied.