Skip to content
OpenAdvisories

Vendor

vue

2 known vulnerabilities.

Products

vue 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2024-9506 Public exploit

    Regular Expression Denial of Service (ReDoS)

    Improper regular expression in Vue's parseHTML function leads to a potential regular expression denial of service vulnerability.

    vue vue vue npm
  • Medium 4.8
    CVE-2024-6783 Public exploit

    Vue client-side XSS via prototype pollution

    A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as `Object.prototype.staticClass` or `Object.prototype.staticStyle` to execute ar…

    vue vue vue-template-compiler npm