Homepage
About Snyk

vue-devtools@5.1.4 vulnerabilities

An electron devtools extension for debugging Vue.js applications.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the vue-devtools package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Cross-site Scripting (XSS)

vue-devtools is an An electron devtools extension for debugging Vue.js applications.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the toast function in devtools-background.js. It can be triggered by postMessage upon opening the browser's developer tools (F12). An attacker can host a specially crafted web page to exploit this vulnerability, then convince a user to view the web page and open developer tools (F12) in other Chrome tabs.

How to fix Cross-site Scripting (XSS)?

A fix was pushed into the master branch but not yet published.

*
Go back to all versions of this package