GHSA-79vf-hf9f-j9q8
@vue/cli-plugin-pwa Regular Expression Denial of Service vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @vue/cli-plugin-pwa | <= 5.0.8 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely.
References
External links from the advisory. They lead to third-party sites.