CVE-2025-5897
CVE-2025-5897 · vuejs vue-cli Markdown Code HtmlPwaPlugin.js HtmlPwaPlugin redos
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely.
CVSS 5.3 · Medium · EPSS 0.6%
- Published
- Updated
Stack: node
Affected products and versions
vue-cli
- Versions
- 5.0.0: Affected
- 5.0.1: Affected
- 5.0.2: Affected
- 5.0.3: Affected
- 5.0.4: Affected
- 5.0.5: Affected
- 5.0.6: Affected
- 5.0.7: Affected
- 5.0.8: Affected
No fix published
@vue/cli-plugin-pwa npm
- Affected ranges
- SEMVER: ≤ 5.0.8
No fix published