@vue/server-renderer
3.5.44 · 13 Oct 2026MIT9.3M / weekRepositoryHomepagenpmAtom feed
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
Is your project affected?
Paste your package.json, or type the range you declare for @vue/server-renderer. It is read in your browser and sent nowhere.
| Line | Newest | Where it stands |
|---|---|---|
| 3.5.44 | Safe from 3.5.42 |
- High@vue/server-renderer: XSS via missing CR in attribute-name blacklistGHSA-g2v6-rqmx-r4w6 · 5 Oct 2026
- 3.x3.0.0 – 3.5.41Fixed in 3.5.42
Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.