Description
A vulnerability in Nuxt DevTools has been fixed in version **2.6.4***. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade.
More details: https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Vercel | Nuxt Devtools | 2.6.3 – ≤ 2.6.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @nuxt/devtools | < 2.6.4 | 2.6.4 | GHSA-xmq3-q5pm-rp26 |