Fedora: Security Advisory (FEDORA-2026-4ea96a154e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@4kda/vuetify-cifrum-components (>=0.0.5, <=0.0.51), @4kda/vuetify-cifrum-demo-app (>=0.0.11, <=0.0.55) +1217 more potentially affected by CVE-2025-8082 via vuetify (>=2.0.0, <=2.7.2)

vuetify NPM version =2.0.0, =0.0.5, =0.0.11, =0.0.13, =0.0.13, =0.0.13, =1.1.10, =1.0.8, =0.1.0, =0.0.1, =0.3.0, =2.0.5, =0.0.5, =0.1.0, =0.1.29 and more Source cves: CVE-2025-8082 Source advisory: OSV:GHSA-9W3X-85MW-4FWM...

@4kda/vuetify-cifrum-components (>=0.0.5, <=0.0.51), @4kda/vuetify-cifrum-demo-app (>=0.0.11, <=0.0.55) +1217 more potentially affected by CVE-2025-8082 via vuetify (>=2.0.0, <=2.7.2)

vuetify NPM version =2.0.0, =0.0.5, =0.0.11, =0.0.13, =0.0.13, =0.0.13, =1.1.10, =1.0.8, =0.1.0, =0.0.1, =0.3.0, =2.0.5, =0.0.5, =0.1.0, =0.1.29 and more Source cves: CVE-2025-8082 Source advisory: SNYK:JS-VUETIFY-14412705...

CVE-2025-8082

Improper neutralization of the title date in the 'VDatePicker' component in Vuetify, allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the 'title-date-format'...