CVE-2024-9506
1 advisory.
npm/vue CVE-2024-9506: low 3.7
ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function
Action: Upgrade vue to 3.0.0-alpha.0 or later.
npm i vue@3.0.0-alpha.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0-alpha.1 | 3.0.0-alpha.0 | - |
Fixed versions
| 3.0.0-alpha.0 |
Sources
- osv: GHSA-5j4c-8p2g-v4jx
- https://nvd.nist.gov/vuln/detail/CVE-2024-9506
- https://github.com/vuejs/core
- https://www.herodevs.com/vulnerability-directory/cve-2024-9506
CVE-2024-9506 · published · modified · JSON