vuejs/core Security Advisories | GitStock

high2026-10-05

@vue/server-renderer: XSS via missing CR in attribute-name blacklist

GHSA-g2v6-rqmx-r4w6

low2024-10-15

ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function

GHSA-5j4c-8p2g-v4jx · CVE-2024-9506