Description
A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| vuejs | vue-cli | 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @vue/cli-plugin-pwa | <= 5.0.8 | — | GHSA-79vf-hf9f-j9q8 |
References
- VDB-311669 | vuejs vue-cli Markdown Code HtmlPwaPlugin.js HtmlPwaPlugin redos vdb-entry technical-description
- VDB-311669 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #585798 | vue 3.5.15 Inefficient Regular Expression Complexity third-party-advisory
- https://github.com/vuejs/vue-cli/pull/7478 issue-tracking