ruoyi-vue-pro 路径遍历漏洞

ruoyi-vue-pro is the Taro Road source code zhijiantianya open source an optimized and refactored efficient back-end management system framework for the development of enterprise back-end , SaaS platforms , WeChat applets back-end and so on. ruoyi-vue-pro 2.4.1 version of a path traversal...

PT-2025-12574 · Unknown · Zhijiantianya Ruoyi-Vue-Pro

Name of the Vulnerable Software and Affected Versions: zhijiantianya ruoyi-vue-pro version 2.4.1 Description: A critical vulnerability was found in the Backend File Upload Interface of zhijiantianya ruoyi-vue-pro. This affects an unknown part of the file "/admin-api/infra/file/upload" and allows...

ruoyi-vue-pro 路径遍历漏洞

ruoyi-vue-pro is the Taro Road source code zhijiantianya open source an optimized and refactored efficient back-end management system framework for the development of enterprise back-end , SaaS platforms , WeChat applets back-end and so on. ruoyi-vue-pro 2.4.1 version of a path traversal...

CicadasCMS 注入漏洞

CicadasCMS is a content management framework developed based on SpringBoot Mybatis SpringSecurity Vue by westboy Individual Developer in China. An injection vulnerability exists in CicadasCMS version 1.0, which stems from vulnerability to SQL injection attacks...

CicadasCMS 注入漏洞

CicadasCMS is a content management framework developed based on SpringBoot Mybatis SpringSecurity Vue by westboy Individual Developer in China. An injection vulnerability exists in CicadasCMS version 1.0, which stems from vulnerability to SQL injection attacks...

Exploit for CVE-2025-30208

Blog Recommendations https://w8ay.fun/toc Recently, a po...

Malicious code in you-test-test-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13a9b3aed0c3abe33ee85f5fc9b7c0dd8020835cb6f1c038f1f6dd6822561a3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-plugin-rely2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40758ca258b918a5774943b38676e85d236795a65d98fe659605aa7b2f72db83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-plugin-rely1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41339a779b006586f47ed496d71acbb4b97bf4174fdd98bf7aced85ed56e6c4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2432 Malicious code in vue-plugin-rely2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40758ca258b918a5774943b38676e85d236795a65d98fe659605aa7b2f72db83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2431 Malicious code in vue-plugin-rely1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41339a779b006586f47ed496d71acbb4b97bf4174fdd98bf7aced85ed56e6c4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-27597

Vue I18n is the internationalization plugin for Vue.js. @intlify/message-resolver and @intlify/vue-i18n-core are vulnerable to Prototype Pollution through the entry function: handleFlatJson. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the...

Prototype Pollution

Overview org.webjars.npm:vue-i18n is an Internationalization plugin for Vue.js Affected versions of this package are vulnerable to Prototype Pollution through the handleFlatJson function due to improper input validation. An attacker can introduce or modify properties within the global prototype...

Prototype Pollution

Overview org.webjars.bowergithub.kazupon:vue-i18n is an Internationalization plugin for Vue.js Affected versions of this package are vulnerable to Prototype Pollution through the handleFlatJson function due to improper input validation. An attacker can introduce or modify properties within the...

CVE-2025-27597

Vue I18n is the internationalization plugin for Vue.js. @intlify/message-resolver and @intlify/vue-i18n-core are vulnerable to Prototype Pollution through the entry function: handleFlatJson. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the...

petite-vue-i18n (9.2.0-alpha.7), vue-i18n (9.2.0-alpha.7) potentially affected by CVE-2025-27597 via @intlify/vue-i18n-core (9.2.0-alpha.7)

@intlify/vue-i18n-core NPM version 9.2.0-alpha.7 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/vue-i18n-core and may be impacted: - petite-vue-i18n 9.2.0-alpha.7 - vue-i18n 9.2.0-alpha.7 Source cves: CVE-2025-27597 Source advisory:...

@acronis-platform/ui-component-library (1.33.0), @aesoper/i18n (>=1.0.56, <=1.0.57) +29 more potentially affected by CVE-2025-27597 via vue-i18n (>=10.0.0, <=10.0.5)

vue-i18n NPM version =10.0.0, =1.0.56, =1.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.13.0 and more Source cves: CVE-2025-27597 Source advisory: OSV:GHSA-P2PH-7G93-HW3M...

@acegroup/cli-templates-vue3-element-admin (1.0.0), @actindo/core-ui (>=0.0.12, <=0.0.75) +402 more potentially affected by CVE-2025-27597 via vue-i18n (>=9.1.0, <=9.14.2)

vue-i18n NPM version =9.1.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.0-next.5436b378dff7e64898bb7046afa2d5d574255b54, =0.0.0-next.0d1cf82f9dfbe1d3e7ec5644f85f97a43c8c2334, =0.7.0-beta.15, =0.7.0-beta.15, =0.0.23, =0.0.6-alpha-2.5, =0.1.87, =0.0.1-beta.1, =1.6.4, =1.6.6 and more Source cves:...

@dv.net/docs-vitepress-openapi (>=1.0.7, <=1.0.8), @emahuni/directus.distilled-app-internals (>=1.1.2-app-13.7.1, <=13.7.1-1.1.0) +33 more potentially affected by CVE-2025-27597 via vue-i18n (>=11.0.0, <=11.1.1)

vue-i18n NPM version =11.0.0, =1.0.7, =1.1.2-app-13.7.1, =0.0.1, =0.0.1, =0.0.1, =0.2.550, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.15.0 and more Source cves: CVE-2025-27597 Source advisory: OSV:GHSA-P2PH-7G93-HW3M...

GHSA-P2PH-7G93-HW3M Vue I18n Allows Prototype Pollution in `handleFlatJson`

Vulnerability type: Prototype Pollution Vulnerability Locations: js v9.1 nodemodules/@intlify/message-resolver/index.js v9.2 or later nodemodules/@intlify/vue-i18n-core/index.js Description: The latest version of @intlify/message-resolver 9.1 and @intlify/vue-i18n-core 9.2 or later, previous...