Skip to content
OpenAdvisories

Product · nuxt

devtools

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-71319

    Nuxt.js Unauthenticated WebSocket RPC Call Leading to Remote Code Execution

    Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools (development mode only) exposes a bidirectional RPC channel over the Vite HMR WebSocket via the nuxt:devtools:rpc plugin. On affected versions the channel has no authen…

    nuxt devtools @nuxt/devtools npm