vuejs records

3 published records for vendor vuejs.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
21Monitor	CVE-2025-5897No exploit	vuejs vue-cli Markdown Code HtmlPwaPlugin.js HtmlPwaPlugin redosvuejs · vue cli · CWE-400 Denial of service	Medium5.3	—	0.6%	Jun 9, 2025
19Monitor	CVE-2024-6783Proof of concept	Vue client-side XSS via prototype pollutionvue · vue · CWE-79 pre-auth RCE XSS Prototype pollution	Medium4.8	—	0.5%	Jul 23, 2024
17Monitor	CVE-2023-5718No exploit	The Vue.js Devtools extension was found to leak screenshot data back to a malicious web page via the standard `postMessage()` API.vuejs · devtools · CWE-200 Pre-auth Info leak	Medium4.3	—	0.2%	Oct 23, 2023

CVE-2025-5897
21Monitor
vuejs vue-cli Markdown Code HtmlPwaPlugin.js HtmlPwaPlugin redos
MediumCVSS 5.3No exploitEPSS 0%
- Denial of service
vuejs · vue cliJun 9, 2025
CVE-2024-6783
19Monitor
Vue client-side XSS via prototype pollution
MediumCVSS 4.8Proof of conceptEPSS 0%
vue · vueJul 23, 2024
CVE-2023-5718
17Monitor
The Vue.js Devtools extension was found to leak screenshot data back to a malicious web page via the standard `postMessage()` API.
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- Info leak
vuejs · devtoolsOct 23, 2023