Description
The Nuxt.js application is running in development mode on your production server. In the development mode, Nuxt.js includes detailed error messages, stack traces, and other debug information that can help attackers understand the inner workings of your application and design attacks more effectively.
In order to minimize the security risk, you should ensure that your Nuxt.js application is running in production mode when deployed to a live environment.
Remediation
Ensure that your Nuxt.js application is running in production mode when deployed to a live environment. This can be achieved by setting the NODE_ENV environment variable to production in your deployment scripts, or by programmatically setting the dev property to false in your Nuxt configuration file in the production environment.
References
Related Vulnerabilities
Missing object-src in CSP Declaration
Roundcube Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-19205)
WordPress Plugin Social Network Tabs Information Disclosure (1.7.1)
Wildcard Detected in Port Portion of Content Security Policy (CSP) Directive
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4900)