Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-5897

vuejs vue-cli Markdown Code HtmlPwaPlugin.js HtmlPwaPlugin redos

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

vuejs vue-cli

  • 5.0.0affected
  • 5.0.1affected
  • 5.0.2affected
  • 5.0.3affected
  • 5.0.4affected
  • 5.0.5affected
  • 5.0.6affected
  • 5.0.7affected
  • 5.0.8affected

References