Anthony Fu

2 exploits Active since May 2023

CVE-2023-2972 WRITEUP CRITICAL WRITEUP

antfu/utils < 0.7.3 - Prototype Pollution

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3.

CVSS 9.8

View Code

CVE-2025-52662 WRITEUP MEDIUM WRITEUP

Nuxt DevTools < 2.6.4 - Cross-Site Scripting via Auth Token Extraction

A vulnerability in Nuxt DevTools has been fixed in version **2.6.4***. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools

CVSS 6.9

View Code