vue
3.5.44 · 13 Oct 2026MIT10.2M / weekRepositoryHomepagenpmAtom feed
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
Is your project affected?
Paste your package.json, or type the range you declare for vue. It is read in your browser and sent nowhere.
| Line | Newest | Where it stands |
|---|---|---|
| 3.5.44 | No known advisory | |
| 2.7.16 | 1 open advisory, worst low · last release Dec 2023, no longer updated |
- LowReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML functionGHSA-5j4c-8p2g-v4jx · 15 Oct 2024
- 2.x2.0.0 – 2.7.16No fix on 2.x
Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.