Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 7, 2025

This PR contains the following updates:

Package Change Age Confidence
@nuxt/devtools (source) 2.5.02.6.4 age confidence

GitHub Vulnerability Alerts

CVE-2025-52662

A vulnerability in Nuxt DevTools has been fixed in version 2.6.4*. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade.


Release Notes

nuxt/devtools (@​nuxt/devtools)

v2.6.4

Compare Source

Bug Fixes
  • using textContent instead of innerHtml for auth pagechore: update lock (7cadbbe)

v2.6.3

Compare Source

v2.6.2

Compare Source

Bug Fixes

v2.6.1

Compare Source

Bug Fixes

v2.6.0

Compare Source

Bug Fixes
Features

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@vercel
Copy link

vercel bot commented Nov 7, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Review Updated (UTC)
content Ignored Ignored Dec 31, 2025 8:09pm

@coderabbitai
Copy link

coderabbitai bot commented Nov 7, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@renovate renovate bot force-pushed the renovate/npm-nuxt-devtools-vulnerability branch from 1b3964f to 888b45c Compare November 10, 2025 17:34
@renovate renovate bot force-pushed the renovate/npm-nuxt-devtools-vulnerability branch from 888b45c to fede9ad Compare November 18, 2025 22:41
@renovate renovate bot force-pushed the renovate/npm-nuxt-devtools-vulnerability branch from fede9ad to 9bbda56 Compare December 3, 2025 18:25
@renovate renovate bot force-pushed the renovate/npm-nuxt-devtools-vulnerability branch from 9bbda56 to 05119f3 Compare December 31, 2025 12:36
@renovate renovate bot force-pushed the renovate/npm-nuxt-devtools-vulnerability branch from 05119f3 to 8fe447d Compare December 31, 2025 20:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant