1467 matches found
CVE-2022-24844
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. The problem occurs in the following code in server/service/system/sysautocodepgsql.go, which means that PostgreSQL must be used as the database for this vulnerability to occu...
CVE-2022-39305
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Versions prior to 2.5.4 contain a file upload ability. The affected code fails to validate fileMd5 and fileName parameters, resulting in an arbitrary file being read. This...
CVE-2024-37896
Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin = v2.6.5 has SQL injection vulnerability. The SQL injection vulnerabilities occur when a web application allows users to input data into SQL queries without sufficiently validating or sanitizing the input. Failing ...
CVE-2024-31457
gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. gin-vue-admin pseudoversion 0.0.0-20240407133540-7bc7c3051067, corresponding to version 2.6.1, has a code injection vulnerability in the backend. In the Plugin System - Plugi...
Malicious code in cms-vue-boilerplate (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e0c9d1c45f4b6208a22223f883c074ca06c64f82f9ac80cec6e64a5a61f08e Any computer that has this package installed or running should be considered...
MAL-2025-1032 Malicious code in cms-vue-boilerplate (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e0c9d1c45f4b6208a22223f883c074ca06c64f82f9ac80cec6e64a5a61f08e Any computer that has this package installed or running should be considered...
Malicious code in vue-plugin-rely-cs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c55de31ae355d3d408d5fa428b5cfb2eca66005c92cf6e397da4a4f29a5cdd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1193 Malicious code in vue-plugin-rely-cs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c55de31ae355d3d408d5fa428b5cfb2eca66005c92cf6e397da4a4f29a5cdd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in vue-plugin-relyc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 428215a3930f7507e26b290a15836d583a40b7e766a440dcf5a70bd8f3876ee0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1194 Malicious code in vue-plugin-relyc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 428215a3930f7507e26b290a15836d583a40b7e766a440dcf5a70bd8f3876ee0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in vue-loader-vue3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c22e5d514334329c3b75f951d755b2a3ef9e122863f7c437530413cd6c49b986 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-257 Malicious code in vue-loader-vue3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c22e5d514334329c3b75f951d755b2a3ef9e122863f7c437530413cd6c49b986 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bc-nuxt-vue-starter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a07ad7d45dd2f1165c59df4d8cd0fae05829dcca27e3804324adb715d3cf966d The OpenSSF Package Analysis project identified 'bc-nuxt-vue-starter' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...
lesli-vue (>=1.0.1, <=1.0.3) potentially affected by CVE-2025-21610 via trix (>=2.0.8, <=2.0.10)
trix NPM version =2.0.8, =1.0.1, =1.0.3 Source cves: CVE-2025-21610 Source advisory: OSV:GHSA-J386-3444-QGWG...
Malware in vue-midata
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-11893 Malicious code in vue-cli-plugin-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb4c725718310cb969ec6171fad585bea2b58fc7d4460be6b706cb8529356d7a The OpenSSF Package Analysis project identified 'vue-cli-plugin-lint-staged' @ 9.9.7 npm as malicious. It is considered malicious because: - The...
Malicious code in vue-cli-plugin-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb4c725718310cb969ec6171fad585bea2b58fc7d4460be6b706cb8529356d7a The OpenSSF Package Analysis project identified 'vue-cli-plugin-lint-staged' @ 9.9.7 npm as malicious. It is considered malicious because: - The...
Malicious code in pokedex-vue3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23c03b4e03986cba75894fb0016bc2e1feb0c72ef2c06287030498b8f7a48ea1 The OpenSSF Package Analysis project identified 'pokedex-vue3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper sanitization of the props passed to the components tab. An attacker could steal sensitive data or execute requests impersonating a user by exploiting this vulnerability. PoC js Hello test import...