CVE-2025-36752

creationtimestamp| type| source ---|---|--- 2025-12-13 11:28:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7uiptuzgj2c 2025-12-14 00:04:03+00:00| seen| https://infosec.exchange/users/offseq/statuses/115714991181828880...

CVE-2025-66402

creationtimestamp| type| source ---|---|--- 2025-12-13 10:32:46+00:00| published-proof-of-concept| https://github.com/misskey-dev/misskey/security/advisories/GHSA-496g-mmpw-j9x3 2026-01-06 20:11:53+00:00| published-proof-of-concept| Telegram/mJFISOaG9sdliiq532xrtHTh4hR6RCcMc304VWQpxZ4gXns...

CVE-2025-36747

creationtimestamp| type| source ---|---|--- 2025-12-13 09:35:18+00:00| seen| https://infosec.exchange/users/offseq/statuses/115711575109311329 2025-12-13 09:35:20+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7ucgdm4j22a 2025-12-13 11:49:38+00:00| seen|...

CVE-2025-11693

creationtimestamp| type| source ---|---|--- 2025-12-13 05:34:11+00:00| seen| https://infosec.exchange/users/offseq/statuses/115710627021545993 2025-12-13 05:34:13+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7tux73etr2k 2025-12-13 11:20:29+00:00| seen|...

CVE-2025-14585

creationtimestamp| type| source ---|---|--- 2025-12-13 03:30:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7to2ll7oh2g...

CVE-2025-64539

creationtimestamp| type| source ---|---|--- 2025-12-13 01:39:30+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3m7thtjiqrs2f...

CVE-2025-67750

creationtimestamp| type| source ---|---|--- 2025-12-13 00:02:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7tcfevafa2y...

CVE-2025-46285

creationtimestamp| type| source ---|---|--- 2025-12-12 23:47:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7tbkjj2jn22 2025-12-16 06:48:31+00:00| seen| https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83 2026-04-02 22:21:28+00:00| seen|...

CVE-2025-64580

creationtimestamp| type| source ---|---|--- 2025-12-12 23:17:20+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3m7t7vc6v6m2i...

Vuetify has a Cross-site Scripting (XSS) vulnerability in the VDatePicker component

Improper neutralization of the title date in the 'VDatePicker' component in Vuetify, allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the 'title-date-format'...

GHSA-9W3X-85MW-4FWM Vuetify has a Cross-site Scripting (XSS) vulnerability in the VDatePicker component

Improper neutralization of the title date in the 'VDatePicker' component in Vuetify, allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the 'title-date-format'...

EUVD-2025-203124

Vuetify has a Cross-site Scripting XSS vulnerability in the VDatePicker component...

CVE-2025-40345

creationtimestamp| type| source ---|---|--- 2025-12-12 19:54:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7sukqmxzn2q 2026-01-21 22:46:10+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mcxqsbv2c225 2026-03-19 00:00:00+00:00| seen|...

Cross-site Scripting (XSS)

Overview vuetify is an a Material Design component framework for Vue.js. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the title-date-format property in the VDatePicker component. An attacker can execute arbitrary scripts in the context of the user's browser by...

Cross-site Scripting (XSS)

Overview org.webjars.npm:vuetify is an a Material Design component framework for Vue.js. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the title-date-format property in the VDatePicker component. An attacker can execute arbitrary scripts in the context of the...

CVE-2025-14570

creationtimestamp| type| source ---|---|--- 2025-12-12 19:41:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7sttfqfp32m...

CVE-2025-65530

creationtimestamp| type| source ---|---|--- 2025-12-12 19:32:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7std6b6aw2r 2026-01-07 00:07:35+00:00| seen| https://gist.github.com/aleksejspopovs/a5f757871c6bd16fab471e5cdd231061 2026-01-09 12:34:22+00:00| seen|...

CVE-2025-67818

creationtimestamp| type| source ---|---|--- 2025-12-12 19:27:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7st2khr5p2c...

CVE-2025-8082

Improper neutralization of the title date in the 'VDatePicker' component in Vuetify, allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the 'title-date-format'...

CVE-2025-8082 Vuetify XSS via unsanitized 'titleDateFormat' in 'VDatePicker'

Improper neutralization of the title date in the 'VDatePicker' component in Vuetify, allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the 'title-date-format'...