TI-2024-06286 CVE-2024-6783 · GHSA-g3ch-rx76-35fx
Vue client-side XSS via prototype pollution
Priority MEDIUM 55
A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution.
vue
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
vue records in CISA KEVNo vue vulnerabilities are listed in CISA KEV.
Records
2 records
TI-2024-08823 CVE-2024-9506 · GHSA-5j4c-8p2g-v4jx
Regular expression denial of service (ReDoS) in vue
Priority LOW 18
Improper regular expression in Vue's parseHTML function leads to a potential regular expression denial of service vulnerability.