vercel Vulnerabilities and Affected Products
Vulnerabilities associated with Nuxt Devtools.
Products
Clear product- next.js48 vulnerabilities
- ai3 vulnerabilities
- turborepo3 vulnerabilities
- ms2 vulnerabilities
- next2 vulnerabilities
- @ai-sdk/harness-codex1 vulnerability
- @ai-sdk/harness-opencode1 vulnerability
- AI SDK1 vulnerability
- flags1 vulnerability
- hyper1 vulnerability
- Nuxt Devtools1 vulnerability
- pkg1 vulnerability
- vercel1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-52662MEDIUM | Nuxt DevTools vulnerable to cross-site scripting (XSS)A vulnerability in Nuxt DevTools has been fixed in version **2.6.4***. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools CWE-79Nov 7, 2025 | CVSS6.9v3.1 | EPSS0.237% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |