CRITICAL9.6npm
GHSA-279x-mwfv-vcqv· CVE-2026-71319Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host
Modified: 8/20/2026
package
npm/@nuxt/devtools
pkg:npm/%40nuxt/devtools
HIGH8.8npm
GHSA-rcvg-rgf7-pppv· CVE-2024-23657Nuxt Devtools has a Path Traversal: '../filedir'
Modified: 8/6/2024
MEDIUM6.9npm
GHSA-xmq3-q5pm-rp26· CVE-2025-52662Nuxt DevTools vulnerable to cross-site scripting (XSS)
Modified: 11/7/2025