Skip to content
OpenAdvisories

Package · npm

vuetify

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-8082

    Vuetify XSS via unsanitized 'titleDateFormat' in 'VDatePicker'

    Improper neutralization of the title date in the 'VDatePicker' component in Vuetify, allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting (XSS) https://owasp.org/www-community/attacks/xss  attack. The vulnerability occ…

    vuetify npm
  • Medium 4.6
    CVE-2022-25873

    Cross-site Scripting (XSS)

    The package vuetify from 2.0.0-beta.4 and before 2.6.10 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization in the 'eventName' function within the VCalendar component.

    vuetify org.webjars.npm:vuetify npm Maven