Vulnerability Database

300,991

Total vulnerabilities in the database

CVE-2025-52662

A vulnerability in Nuxt DevTools has been fixed in version 2.6.4*. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade.

More details: https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools

Published: Nov 7, 2025
Updated: Nov 14, 2025
CVE: CVE-2025-52662
GHSA: GHSA-xmq3-q5pm-rp26
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.9
AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
@nuxt / devtools	-	2.6.4

https://github.com/nuxt/devtools/commit/7cadbbe9
https://github.com/nuxt/devtools/releases/tag/v2.6.4
https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo