npm - OSV

GHSA-g2v6-rqmx-r4w6

npm/@vue/server-renderer

@vue/server-renderer: XSS via missing CR in attribute-name blacklist 7 hours ago

Fix available
Severity - 7.2 (High)

GHSA-gvf2-2rh5-mpgf

npm/@openc3/vue-common

OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widget 23 Sep

Fix available
Severity - 7.6 (High)

MAL-2026-15887

npm/html_vue

Malicious code in html_vue (npm) 03 Sep

No fix available

MAL-2026-15894

npm/vscode-vue

Malicious code in vscode-vue (npm) 03 Sep

No fix available

MAL-2026-14369

npm/@syncraft-labs/vue

Malicious code in @syncraft-labs/vue (npm) 23 Aug

No fix available

MAL-2026-13668

npm/@lambda-platform/lambda-vue

Malicious code in @lambda-platform/lambda-vue (npm) 07 Aug

No fix available

MAL-2026-13465

npm/vite-vue-path-map

Malicious code in vite-vue-path-map (npm) 06 Aug

No fix available

MAL-2026-11617

npm/@onereach/orest-vue-demi-vue2

Malicious code in @onereach/orest-vue-demi-vue2 (npm) 04 Aug

No fix available

MAL-2026-11618

npm/@onereach/orest-vue-demi-vue3

Malicious code in @onereach/orest-vue-demi-vue3 (npm) 04 Aug

No fix available

MAL-2026-11797

npm/@qlik/eslint-config-vue

Malicious code in @qlik/eslint-config-vue (npm) 04 Aug

No fix available

MAL-2026-6702

npm/vue-demi-fix

Malicious code in vue-demi-fix (npm) 30 Jun

No fix available

MAL-2026-5438

npm/corporate-front-vue

Malicious code in corporate-front-vue (npm) 09 Jun

No fix available

MAL-2026-5165

npm/@emcd-vue/loans

Malicious code in @emcd-vue/loans (npm) 01 Jun

No fix available

MAL-2026-5163

npm/@emcd-vue/auth

Malicious code in @emcd-vue/auth (npm) 01 Jun

No fix available

MAL-2026-5164

npm/@emcd-vue/b2b-pay-form

Malicious code in @emcd-vue/b2b-pay-form (npm) 01 Jun

No fix available

MAL-2026-4707

npm/vue-compiler-sfc-plugin

Malicious code in vue-compiler-sfc-plugin (npm) 25 May

No fix available

Vulnerabilities