Vue.js

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Vue.js records in CISA KEV

No Vue.js vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Devtools · all components

TI-2023-05261 CVE-2023-5718 · GHSA-hch9-gprw-2g9j

MEDIUM 53

The Vue.js Devtools extension was found to leak screenshot data back to a malicious web page via the standard `postMessage()` API.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00288 Published 2023-10-23 Fixed in 6.5.1 CWE-200