Approved changes feed: RSS · Atom

cpe:2.3:a:vuejs:vue_cli:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVuejs (18112002-85e9-56ca-a218-917a2ff361be)
ProductVue Cli (b2037d46-3cb5-519d-bdd5-3dc368abaa37)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/vuejs/vue-cli purl2cpe 2026-06-01 10:13:41.409441
pkg:npm/%40vue/cli purl2cpe 2026-06-01 10:13:41.409444

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5897 vulnerable 2026-06-08 07:37:25.998709 vuejs vue-cli Markdown Code HtmlPwaPlugin.js HtmlPwaPlugin redos
MEDIUM (4.3)
A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely.
Published: 2025-06-09T21:00:17.023Z
Updated: 2025-06-10T15:29:58.751Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.