# What changed in @nuxt/devtools

> 5 changes in @nuxt/devtools 3 from its official release notes, upgrade guides and advisories: 1 breaking, 1 security. Each one cited. Sources checked 2026-10-18. HTML: https://unstale.sh/npm/@nuxt/devtools/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @nuxt/devtools 3

### Breaking changes

- Server config and storage mounts now require the dev auth token. (3.4.3) — [release notes](https://github.com/nuxt/devtools/releases/tag/v3.4.3)

### Security

- Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host (3.3.1) — [security advisory](https://github.com/advisories/GHSA-279X-MWFV-VCQV)

### Fixes and other changes

- Restored $fetch types. (3.4.2) — [release notes](https://github.com/nuxt/devtools/releases/tag/v3.4.2)
- Updated the DevTools client for unhead v3 compatibility. (3.4.2) — [release notes](https://github.com/nuxt/devtools/releases/tag/v3.4.2)
- Prevents StateEditor from freezing the page when editing live state. (3.4.1) — [release notes](https://github.com/nuxt/devtools/releases/tag/v3.4.1)