626 matches found
CVE-2025-52662
A vulnerability in Nuxt DevTools has been fixed in version 2.6.4. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools...
CVE-2025-52662
A vulnerability in Nuxt DevTools has been fixed in version 2.6.4. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools...
Nuxt DevTools 安全漏洞
Nuxt DevTools is an open source set of visualization tools from Nuxt. A security vulnerability exists in Nuxt DevTools version 2.6.4 that stems from the possibility of extracting Nuxt authentication tokens via cross-site scripting under certain configurations...
PT-2025-45398
Name of the Vulnerable Software and Affected Versions Nuxt DevTools versions prior to 2.6.4 Description A flaw exists in Nuxt DevTools that could allow the extraction of Nuxt authentication tokens through a cross-site scripting XSS attack, under specific configurations. Recommendations Update to...
Client-Side Path Traversal
Nuxt is vulnerable to Client-Side Path Traversal. The vulnerability is due to improper validation of user-controlled data within the Island payload revival mechanism, which allows an attacker to craft malicious nuxtisland objects that manipulate client-side requests to arbitrary endpoints within...
nuxt-tawk-to (>=1.0.0, <=2.0.0) potentially affected by CVE-2025-8349 via @tawk.to/tawk-messenger-vue-3 (1.0.3)
@tawk.to/tawk-messenger-vue-3 NPM version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on @tawk.to/tawk-messenger-vue-3 and may be impacted: - nuxt-tawk-to =1.0.0, =2.0.0 Source cves: CVE-2025-8349 Source advisory:...
nuxt-spec (>=0.1.10, <=0.1.11) potentially affected by CVE-2025-62410 via happy-dom (20.0.0)
happy-dom NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on happy-dom and may be impacted: - nuxt-spec =0.1.10, =0.1.11 Source cves: CVE-2025-62410 Source advisory: SNYK:JS-HAPPYDOM-13559227...
EUVD-2019-0580
Malware in sbrugna...
EUVD-2023-3089
Malicious code in bioql PyPI...
EUVD-2024-2564
Malicious code in bioql PyPI...
EUVD-2025-8727
Malicious code in bioql PyPI...
EUVD-2023-1799
Malicious code in bioql PyPI...
EUVD-2024-2661
Malicious code in bioql PyPI...
EUVD-2022-51759
Malicious code in bioql PyPI...
EUVD-2025-0115
Malicious code in bioql PyPI...
EUVD-2024-2646
Malicious code in bioql PyPI...
EUVD-2022-51758
Malicious code in bioql PyPI...
EUVD-2023-12868
Malicious code in bioql PyPI...