Malicious code in vue-cli-plugin-changelog (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in vue-nect (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11487 Malicious code in vue-nect (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11486 Malicious code in vue-cli-plugin-changelog (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11469 Malicious code in template-vue-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in template-vue-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11260 Malicious code in @bytedanc-ad/market-ui-vue2 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in vue-midata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc06ec1e2eb7c0a1bd2a27e81568ad8ee48c80f63b74284118e768a9740222e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11190 Malicious code in vue-midata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc06ec1e2eb7c0a1bd2a27e81568ad8ee48c80f63b74284118e768a9740222e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@acronis-platform/ui-component-library (1.33.0), @nhealth/app (>=0.0.16, <=0.0.20) +25 more potentially affected by CVE-2024-52810 via vue-i18n (>=10.0.0, <=10.0.4)

vue-i18n NPM version =10.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.12.0 - @xwiki/cristal-file-preview-ui 0.12.0 and more Source cves: CVE-2024-52810 Source advisory: OSV:GHSA-HJWQ-MJWJ-4X6C...

@actindo/core-ui (>=0.0.17, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +86 more potentially affected by CVE-2024-52810 via vue-i18n (>=9.7.0, <=9.14.1)

vue-i18n NPM version =9.7.0, =0.0.17, =0.0.1, =0.0.1, =0.0.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =0.0.1711457390679, =0.0.0, =1.0.0-beta.7, =1.2.2 and more Source cves: CVE-2024-52810 Source advisory: OSV:GHSA-HJWQ-MJWJ-4X6C...

GHSA-9R9M-FFP6-9X4V vue-i18n has cross-site scripting vulnerability with prototype pollution

Vulnerability type XSS Description vue-i18n can be passed locale messages to createI18n or useI18n. we can then translate them using t and $t. vue-i18n has its own syntax for local messages, and uses a message compiler to generate AST. In order to maximize the performance of the translation...

@acronis-platform/ui-component-library (1.33.0), @nhealth/app (>=0.0.16, <=0.0.20) +25 more potentially affected by CVE-2024-52809 via vue-i18n (>=10.0.0, <=10.0.4)

vue-i18n NPM version =10.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.12.0 - @xwiki/cristal-file-preview-ui 0.12.0 and more Source cves: CVE-2024-52809 Source advisory: OSV:GHSA-9R9M-FFP6-9X4V...

vue-i18n has cross-site scripting vulnerability with prototype pollution

Vulnerability type XSS Description vue-i18n can be passed locale messages to createI18n or useI18n. we can then translate them using t and $t. vue-i18n has its own syntax for local messages, and uses a message compiler to generate AST. In order to maximize the performance of the translation...

@actindo/core-ui (>=0.0.12, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +129 more potentially affected by CVE-2024-52809 via vue-i18n (>=9.3.0, <=9.14.1)

vue-i18n NPM version =9.3.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.1-beta.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =8.2.2, =9.0.4 - @delfinjs/shared-vue 1.0.0 - @directus-labs/flow-trigger-bundle 1.0.0 - @dispatchable/metronic-vue 1.0.0 and more Source cves: CVE-2024-52809 Source advisory:...

CVE-2024-52809

vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to createI18n or useI18n. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in versions...

CVE-2024-52809

vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to "createI18n" or "useI18n". When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in...

CVE-2024-52809 Cross-site Scripting vulnerability with prototype pollution in vue-i18n

vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to createI18n or useI18n. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in versions...

CVE-2024-52809 Cross-site Scripting vulnerability with prototype pollution in vue-i18n

vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to createI18n or useI18n. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in versions...

CVE-2024-52809

CVE-2024-52809 affects the Vue.js internationalization plugin vue-i18n . In affected versions, locale messages passed to createI18n or useI18n can cause the AST for locale messages to be generated in development mode, creating a potential Cross-site Scripting (XSS) risk. The issue is mitigated in...