CVE-2025-52662: XSS on Nuxt DevTools

T1Covered by 1 source · first reported by Vercel (blog + changelog) at 06 Nov 2025, 13:00 UTC

security vulnerability A medium-severityin Nuxt DevTools was responsibly disclosed, and has been fixed for version 2.6.4. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. Nuxt DevTools users are encouraged to upgrade to the latest version. Read more…