In short
- CVE-2025-5897 is a HIGH (CVSS 7.5) vulnerability affecting vue cli (vuejs), @vue/cli-plugin-pwa.
- Chance of exploitation in the next 30 days (EPSS): 0.66%, higher than 51.6% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely.
NVD description
A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free