252 matches found
Malicious code in vuetify-proteomics-biohacking-cors (npm)
The package vuetify-proteomics-biohacking-cors was found to contain malicious code...
MAL-2025-38685 Malicious code in vuetify-halley-aldebaran-radiant (npm)
The package vuetify-halley-aldebaran-radiant was found to contain malicious code...
MAL-2025-38683 Malicious code in vuetify-commitizen-prompts-dotenv-parse-variables (npm)
The package vuetify-commitizen-prompts-dotenv-parse-variables was found to contain malicious code...
MAL-2025-38686 Malicious code in vuetify-jwt-pegasus-spawn (npm)
The package vuetify-jwt-pegasus-spawn was found to contain malicious code...
Malicious code in vuetify-halley-aldebaran-radiant (npm)
The package vuetify-halley-aldebaran-radiant was found to contain malicious code...
Malicious code in ichnology-helios-grus-vuetify (npm)
The package ichnology-helios-grus-vuetify was found to contain malicious code...
MAL-2025-38684 Malicious code in vuetify-electron-builder-pulsar-module (npm)
The package vuetify-electron-builder-pulsar-module was found to contain malicious code...
Exploit for CVE-2025-1461
Vuetify VCalendar XSS Vulnerability POC CVE-2025-1461 This...
CVE-2025-1461
Improper neutralization of the value of the 'eventMoreText' property of the 'VCalendar' component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the...
Cross-site Scripting (XSS)
Overview org.webjars.npm:vuetify is an a Material Design component framework for Vue.js. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the improper neutralization of input in the eventMoreText property of the VCalendar component. An attacker can execute...
Cross-site Scripting (XSS)
Overview org.webjars.bowergithub.vuetifyjs:vuetify is an a Material Design component framework for Vue.js. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the improper neutralization of input in the eventMoreText property of the VCalendar component. An attacker...
CVE-2025-1461 Vuetify XSS through 'eventMoreText' prop of VCalendar
Improper neutralization of the value of the 'eventMoreText' property of the 'VCalendar' component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the...
CVE-2025-1461 Vuetify XSS through 'eventMoreText' prop of VCalendar
Improper neutralization of the value of the 'eventMoreText' property of the 'VCalendar' component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the...
CVE-2025-1461
CVE-2025-1461 affects Vuetify’s VCalendar eventMoreText prop. Affected: Vuetify >=2.0.0 and
vuetify 跨站脚本漏洞
vuetify is a material component framework for Vue open source by vuetify Germany. A cross-site scripting vulnerability exists in versions prior to vuetify 3.0.0, which stems from the eventMoreText property of the VCalendar component not being cleaned up correctly, which could lead to a cross-site...
PT-2025-23120 · Vuetify · Vuetify
Name of the Vulnerable Software and Affected Versions: Vuetify versions 2.0.0 through 2.x Description: The issue arises from the improper neutralization of the eventMoreText property value in the VCalendar component, allowing unsanitized HTML to be inserted into the page. This can lead to a...
aepsych (>=0.3.0 <=0.4.0), environmentfinder (>=1.1.3 <=1.1.4) +3 more potentially affected by CVE-2024-30265 via voila (>=0.3.0rc0 <=0.3.7)
voila PYPI version =0.3.0rc0, =0.3.0, =1.1.3, =0.1.0, =1.0.4 - oscovida =0.2.6 - voila-vuetify =0.5.2 Source cves: CVE-2024-30265 Source advisory: OSV:GHSA-2Q59-H24C-W6FG...
Cross-site Scripting (XSS)
vuetify is vulnerable to Cross-site Scripting XSS. The library does not properly escape the user inputs through the eventName function within the VCalendar component, which allows an authenticated attacker to inject and execute malicious javascript...
org.webjars.npm:nuxtjs__vuetify (=0.4.2) potentially affected by CVE-2022-25873 via org.webjars.npm:vuetify (=2.0.0-beta.9)
org.webjars.npm:vuetify MAVEN version =2.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vuetify and may be impacted: - org.webjars.npm:nuxtjsvuetify =0.4.2 Source cves: CVE-2022-25873 Source advisory: OSV:GHSA-Q4Q5-C5CV-2P68...
@appsocially/timepassport (>=0.1.2-0.1 <=0.1.29), @becompliancebr/shared-components (>=1.0.0 <=1.10.0) +73 more potentially affected by CVE-2022-25873 via vuetify (>=2.0.0 <=2.6.1)
vuetify NPM version =2.0.0, =0.1.2-0.1, =1.0.0, =1.2.5, =5.0.1-beta.0, =0.0.128, =0.0.101-beta.22, =0.0.128, =0.0.128, =0.0.128, =0.0.128, =0.0.128, =0.0.128, =0.0.128, =0.1.0, =0.1.1 - @een/cm-timeline-sdk =0.1.8 and more Source cves: CVE-2022-25873 Source advisory: OSV:GHSA-Q4Q5-C5CV-2P68...