CVE-2025-5897
vuejs vue-cli Markdown Code HtmlPwaPlugin.js HtmlPwaPlugin redos
Summary
vuejs vue-cli Markdown Code HtmlPwaPlugin.js HtmlPwaPlugin redos
Original description
The description as published by the source.
A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- report github.com
- report vuldb.com