Skip to content
OpenAdvisories

Package · npm

@vue/server-renderer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.2
    GHSA-g2v6-rqmx-r4w6

    @vue/server-renderer: XSS via missing CR in attribute-name blacklist

    ## Description `@vue/server-renderer` was investigated specifically because it's the one place in Vue where template rendering output becomes a real HTTP response body -- a genuine server-side trust boundary, unlike client-side rendering which only ever affec…

    @vue/server-renderer npm