Malicious code in vue-search-ui-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eba39e62ce67a90fdd330c95bec218d75c2ddbb0e16d24625081c96a115a046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1266 Malicious code in vue-search-ui-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eba39e62ce67a90fdd330c95bec218d75c2ddbb0e16d24625081c96a115a046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mindskip xzs-mysql 安全漏洞

Mindskip xzs-mysql is a java + vue front-end and back-end separated exam system from Wuhan Mindskip Technology Mindskip company in China. The main advantages are simple and fast development and deployment, friendly interface design and clear code structure. Support web end and wechat small progra...

CVE-2025-24981 Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc

MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. In affected versions unsafe parsing logic of the URL from markdown can lead to arbitrary JavaScript code due to a bypass to the existing guards around the javascript: protocol scheme in the URL. Th...

CVE-2022-21660

Gin-vue-admin is a backstage management system based on vue and gin. In versions prior to 2.4.7 low privilege users are able to modify higher privilege users. Authentication is missing on the setUserInfo function. Users are advised to update as soon as possible. There are no known workarounds...

CVE-2022-24844

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. The problem occurs in the following code in server/service/system/sysautocodepgsql.go, which means that PostgreSQL must be used as the database for this vulnerability to occu...

CVE-2022-39305

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Versions prior to 2.5.4 contain a file upload ability. The affected code fails to validate fileMd5 and fileName parameters, resulting in an arbitrary file being read. This...

CVE-2024-37896

Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin = v2.6.5 has SQL injection vulnerability. The SQL injection vulnerabilities occur when a web application allows users to input data into SQL queries without sufficiently validating or sanitizing the input. Failing ...

CVE-2024-31457

gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. gin-vue-admin pseudoversion 0.0.0-20240407133540-7bc7c3051067, corresponding to version 2.6.1, has a code injection vulnerability in the backend. In the Plugin System - Plugi...

Malicious code in cms-vue-boilerplate (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e0c9d1c45f4b6208a22223f883c074ca06c64f82f9ac80cec6e64a5a61f08e Any computer that has this package installed or running should be considered...

MAL-2025-1032 Malicious code in cms-vue-boilerplate (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e0c9d1c45f4b6208a22223f883c074ca06c64f82f9ac80cec6e64a5a61f08e Any computer that has this package installed or running should be considered...

MAL-2025-1193 Malicious code in vue-plugin-rely-cs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c55de31ae355d3d408d5fa428b5cfb2eca66005c92cf6e397da4a4f29a5cdd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-plugin-rely-cs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c55de31ae355d3d408d5fa428b5cfb2eca66005c92cf6e397da4a4f29a5cdd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-plugin-relyc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 428215a3930f7507e26b290a15836d583a40b7e766a440dcf5a70bd8f3876ee0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1194 Malicious code in vue-plugin-relyc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 428215a3930f7507e26b290a15836d583a40b7e766a440dcf5a70bd8f3876ee0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-loader-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c22e5d514334329c3b75f951d755b2a3ef9e122863f7c437530413cd6c49b986 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-257 Malicious code in vue-loader-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c22e5d514334329c3b75f951d755b2a3ef9e122863f7c437530413cd6c49b986 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bc-nuxt-vue-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a07ad7d45dd2f1165c59df4d8cd0fae05829dcca27e3804324adb715d3cf966d The OpenSSF Package Analysis project identified 'bc-nuxt-vue-starter' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

lesli-vue (>=1.0.1, <=1.0.3) potentially affected by CVE-2025-21610 via trix (>=2.0.8, <=2.0.10)

trix NPM version =2.0.8, =1.0.1, =1.0.3 Source cves: CVE-2025-21610 Source advisory: OSV:GHSA-J386-3444-QGWG...

Malicious code in vue-cli-plugin-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb4c725718310cb969ec6171fad585bea2b58fc7d4460be6b706cb8529356d7a The OpenSSF Package Analysis project identified 'vue-cli-plugin-lint-staged' @ 9.9.7 npm as malicious. It is considered malicious because: - The...