Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: vue Clear all filters
TI-2024-08823 CVE-2024-9506 · GHSA-5j4c-8p2g-v4jx

Regular expression denial of service (ReDoS) in vue

Priority LOW 18

Improper regular expression in Vue's parseHTML function leads to a potential regular expression denial of service vulnerability.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00571 Published 2024-10-15 Partial fix · 3.0.0-alpha.0 CWE-1333
TI-2024-06286 CVE-2024-6783 · GHSA-g3ch-rx76-35fx

Vue client-side XSS via prototype pollution

Priority MEDIUM 55

A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00506 Published 2024-07-23 No fix listed CWE-79