CRITICAL9.6npm
GHSA-279x-mwfv-vcqv· CVE-2026-71319Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host
Modified: 8/20/2026
package
pkg:npm/%40nuxt/devtools
Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host
Modified: 8/20/2026
Nuxt Devtools has a Path Traversal: '../filedir'
Modified: 8/6/2024
Nuxt DevTools vulnerable to cross-site scripting (XSS)
Modified: 11/7/2025