CVE-2025-5897

CVE-2025-5897 affects the Vue CLI (vue-cli) up to version 5.0.8, specifically the HtmlPwaPlugin.js in the Markdown Code Handler. The issue is an inefficient regular expression handling that can enable a Regular Expression Denial of Service (ReDoS) scenario and may be triggered remotely. Multiple ...

vuejs Vue CLI 安全漏洞

vuejs Vue CLI is a webpack-based Vue.js development tool open-sourced by Vue. A security vulnerability exists in vuejs Vue CLI version 5.0.8 and earlier, which stems from an inefficient regular expression complexity in the function HtmlPwaPlugin...

shiyi-blog 安全漏洞

shiyi-blog is a vue+springboot front-end and back-end separated blog system by bule individual developer. A security vulnerability exists in shiyi-blog 1.2.1 and earlier versions, which stems from path traversal due to incorrect operation of the file/source parameter...

shiyi-blog 授权问题漏洞

shiyi-blog is a vue+springboot front-end and back-end separated blog system by bule individual developer. An authorization issue vulnerability exists in shiyi-blog 1.2.1 and earlier versions, which stems from improper authentication...

shiyi-blog 安全漏洞

shiyi-blog is a vue+springboot front-end and back-end separated blog system by bule individual developer. A security vulnerability exists in shiyi-blog 1.2.1 and earlier versions, which stems from an improper authorization issue...

Malicious code in vue-black-dashboard (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d77bae724170beee5b8b27e6eeaa6aaed66e932eed0a0d012b42ab862475d428 Any computer that has this package installed or running should be considered...

MAL-2025-4662 Malicious code in vue-black-dashboard (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d77bae724170beee5b8b27e6eeaa6aaed66e932eed0a0d012b42ab862475d428 Any computer that has this package installed or running should be considered...

CVE-2024-52809

vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to createI18n or useI18n. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in versions...

CVE-2024-31760

An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component...

CVE-2024-6783

A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as Object.prototype.staticClass or Object.prototype.staticStyle to execute arbitrary JavaScript code...

CVE-2022-47762

In gin-vue-admin 2.5.5, the download module has a Path Traversal vulnerability...

CVE-2022-40365

Cross site scripting XSS vulnerability in ouqiang gocron through 1.5.3, allows attackers to execute arbitrary code via scope.row.hostname in web/vue/src/pages/taskLog/list.vue...

CVE-2021-33022

Philips Vue PACS versions 12.2.x.x and prior transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors...

CVE-2021-39369

In Philips formerly Carestream Vue MyVue PACS through 12.2.x.x, the VideoStream function allows Path Traversal by authenticated users to access files stored outside of the web root...

CVE-2021-33018

The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unnecessary risk that may result in the exposure of sensitive information...

CVE-2021-44219

Gin-Vue-Admin before 2.4.6 mishandles a SQL database...

CVE-2021-27501

Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities...

CVE-2020-36154

The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative privileges via a Trojan horse application...

Malicious code in vue-vibe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab8de1f63578f65874a6d949bddf997d76bf6e1c2a0fcfae34f696368003df5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4290 Malicious code in vue-vibe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab8de1f63578f65874a6d949bddf997d76bf6e1c2a0fcfae34f696368003df5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...