In breve
- CVE-2025-5897 è una vulnerabilità ALTO (CVSS 7.5) che riguarda vue cli (vuejs), @vue/cli-plugin-pwa.
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.66%, superiore al 51.6% delle vulnerabilità.
- Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.
Description
A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely.
NVD description
A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free