GHSA-xmq3-q5pm-rp26

Опубликовано: 07 нояб. 2025

Источник: github

Github: Прошло ревью

CVSS3: 6.9

Описание

Nuxt DevTools vulnerable to cross-site scripting (XSS)

A vulnerability in Nuxt DevTools has been fixed in version 2.6.4*. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade.

Ссылки

Пакеты

Наименование

@nuxt/devtools

npm

Затронутые версииВерсия исправления

< 2.6.4

2.6.4

EPSS

Процентиль: 9%

0.00033

Низкий

6.9 Medium

CVSS3

CVE ID

CVE-2025-52662

Дефекты

CWE-79

Связанные уязвимости

CVE-2025-52662

CVSS3: 6.9

nvd

3 месяца назад

A vulnerability in Nuxt DevTools has been fixed in version **2.6.4***. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools

EPSS

Процентиль: 9%

0.00033

Низкий

6.9 Medium

CVSS3

CVE ID

CVE-2025-52662

Дефекты

CWE-79