CVE-2025-6099: Improper Authorization

A vulnerability was found in szluyu99 gin-vue-blog up to 61dd11ccd296e8642a318ada3ef7b3f7776d2410. It has been declared as critical. This vulnerability affects unknown code of the file gin-blog-server/internal/manager.go of the component PATCH Request Handler. The manipulation leads to improper...

PT-2025-25509 · Unknown · Szluyu99 Gin-Vue-Blog

Name of the Vulnerable Software and Affected Versions: szluyu99 gin-vue-blog up to 61dd11ccd296e8642a318ada3ef7b3f7776d2410 Description: A critical vulnerability was found in the PATCH Request Handler component of szluyu99 gin-vue-blog, affecting unknown code in the file...

szluyu99 gin-vue-blog 安全漏洞

szluyu99 gin-vue-blog is a Golang full-stack blog by Zhenyu personal developer, supporting Docker Compose one-click deployment. Based on the latest front-end and back-end technology stack Vue3, TS, Unocs, Redis and so on. The front-end contains a blog post display front , blog background manageme...

Exploit for CVE-2026-36848

CVE-2026-36848 A critical path traversal vulnerability was id...

CVE-2025-5897

A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression...

Regular Expression Denial Of Service (ReDoS)

@vue/cli-plugin-pwa is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to unsafe regex handling in the HtmlPwaPlugin component of the Markdown code handler, which can be exploited remotely to degrade performance...

Malicious code in vue-coreo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1167ba130b5705599b06b2fbc88a331c7b50940fd3228204637781cc9b6df0a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4906 Malicious code in vue-coreo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1167ba130b5705599b06b2fbc88a331c7b50940fd3228204637781cc9b6df0a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in vue-coreo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in eslint-parser-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e78236f48c6c57e51a72f8df6807df4f6d5c0a5b386814bfc0ca2d0b81bd82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in eslint-parser-vue

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4827 Malicious code in eslint-parser-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e78236f48c6c57e51a72f8df6807df4f6d5c0a5b386814bfc0ca2d0b81bd82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@nodefony/monitoring-bundle (>=7.0.0-beta.3, <=7.0.0-beta.8), nodefony (>=7.0.0-beta.3, <=7.0.0-beta.8) potentially affected by CVE-2025-5897 via @vue/cli-plugin-pwa (5.0.8)

@vue/cli-plugin-pwa NPM version 5.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on @vue/cli-plugin-pwa and may be impacted: - @nodefony/monitoring-bundle =7.0.0-beta.3, =7.0.0-beta.3, =7.0.0-beta.8 Source cves: CVE-2025-5897 Source advisory:...

@vue/cli-plugin-pwa Regular Expression Denial of Service vulnerability

A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression...

CVE-2025-5897 vuejs vue-cli Markdown Code HtmlPwaPlugin.js HtmlPwaPlugin redos

A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression...

CVE-2025-5897

CVE-2025-5897 affects the Vue CLI (vue-cli) up to version 5.0.8, specifically the HtmlPwaPlugin.js in the Markdown Code Handler. The issue is an inefficient regular expression handling that can enable a Regular Expression Denial of Service (ReDoS) scenario and may be triggered remotely. Multiple ...

CVE-2025-5897 vuejs vue-cli Markdown Code HtmlPwaPlugin.js HtmlPwaPlugin redos

A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression...

vuejs Vue CLI 安全漏洞

vuejs Vue CLI is a webpack-based Vue.js development tool open-sourced by Vue. A security vulnerability exists in vuejs Vue CLI version 5.0.8 and earlier, which stems from an inefficient regular expression complexity in the function HtmlPwaPlugin...

CVE-2025-5897: Inefficient Regular Expression Complexity

A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression...

Malware in vue-black-dashboard

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...