GHSA-xmq3-q5pm-rp26
Nuxt DevTools vulnerable to cross-site scripting (XSS)
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @nuxt/devtools | < 2.6.4 | 2.6.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
A vulnerability in Nuxt DevTools has been fixed in version **2.6.4***. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade.
References
External links from the advisory. They lead to third-party sites.