Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/15 8:56 p.m.29 views

Nuxt: Dev server discloses project absolute path and persistent workspace UUID via `/.well-known/appspecific/com.chrome.devtools.json`

Summary When running nuxt dev, Nuxt registers an unauthenticated route at /.well-known/appspecific/com.chrome.devtools.json that returns the absolute filesystem path of the project root and a per-project UUID persisted to nodemodules/.cache/nuxt/chrome-workspace.json. The route is enabled by...

5.5AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder