Add CVE-2024-9506 for Vue

RetireJS · Oct 31, 2024 · 8b9d089 · 8b9d089
1 parent 560ca99
commit 8b9d089
Show file tree

Hide file tree

Showing 5 changed files with 105 additions and 0 deletions.
diff --git a/repository/jsrepository-master.json b/repository/jsrepository-master.json
@@ -4457,6 +4457,27 @@
   },
   "vue": {
     "vulnerabilities": [
+      {
+        "ranges": [
+          {
+            "atOrAbove": "2.0.0-alpha.1",
+            "below": "3.0.0-alpha.0"
+          }
+        ],
+        "summary": "ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function",
+        "cwe": ["CWE-1333"],
+        "severity": "low",
+        "identifiers": {
+          "CVE": ["CVE-2024-9506"],
+          "githubID": "GHSA-5j4c-8p2g-v4jx"
+        },
+        "info": [
+          "https://github.com/advisories/GHSA-5j4c-8p2g-v4jx",
+          "https://nvd.nist.gov/vuln/detail/CVE-2024-9506",
+          "https://github.com/vuejs/core",
+          "https://www.herodevs.com/vulnerability-directory/cve-2024-9506"
+        ]
+      },
       {
         "ranges": [
           {

diff --git a/repository/jsrepository-v2.json b/repository/jsrepository-v2.json
@@ -5888,6 +5888,27 @@
         "info": [
           "https://github.com/vuejs/vue/releases/tag/v2.6.11"
         ]
+      },
+      {
+        "atOrAbove": "2.0.0-alpha.1",
+        "below": "3.0.0-alpha.0",
+        "cwe": [
+          "CWE-1333"
+        ],
+        "severity": "low",
+        "identifiers": {
+          "summary": "ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function",
+          "CVE": [
+            "CVE-2024-9506"
+          ],
+          "githubID": "GHSA-5j4c-8p2g-v4jx"
+        },
+        "info": [
+          "https://github.com/advisories/GHSA-5j4c-8p2g-v4jx",
+          "https://nvd.nist.gov/vuln/detail/CVE-2024-9506",
+          "https://github.com/vuejs/core",
+          "https://www.herodevs.com/vulnerability-directory/cve-2024-9506"
+        ]
       }
     ],
     "extractors": {

diff --git a/repository/jsrepository-v3.json b/repository/jsrepository-v3.json
@@ -6025,6 +6025,27 @@
           "info": [
             "https://github.com/vuejs/vue/releases/tag/v2.6.11"
           ]
+        },
+        {
+          "atOrAbove": "2.0.0-alpha.1",
+          "below": "3.0.0-alpha.0",
+          "cwe": [
+            "CWE-1333"
+          ],
+          "severity": "low",
+          "identifiers": {
+            "summary": "ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function",
+            "CVE": [
+              "CVE-2024-9506"
+            ],
+            "githubID": "GHSA-5j4c-8p2g-v4jx"
+          },
+          "info": [
+            "https://github.com/advisories/GHSA-5j4c-8p2g-v4jx",
+            "https://nvd.nist.gov/vuln/detail/CVE-2024-9506",
+            "https://github.com/vuejs/core",
+            "https://www.herodevs.com/vulnerability-directory/cve-2024-9506"
+          ]
         }
       ],
       "extractors": {

diff --git a/repository/jsrepository-v4.json b/repository/jsrepository-v4.json
@@ -6024,6 +6024,27 @@
         "info": [
           "https://github.com/vuejs/vue/releases/tag/v2.6.11"
         ]
+      },
+      {
+        "atOrAbove": "2.0.0-alpha.1",
+        "below": "3.0.0-alpha.0",
+        "cwe": [
+          "CWE-1333"
+        ],
+        "severity": "low",
+        "identifiers": {
+          "summary": "ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function",
+          "CVE": [
+            "CVE-2024-9506"
+          ],
+          "githubID": "GHSA-5j4c-8p2g-v4jx"
+        },
+        "info": [
+          "https://github.com/advisories/GHSA-5j4c-8p2g-v4jx",
+          "https://nvd.nist.gov/vuln/detail/CVE-2024-9506",
+          "https://github.com/vuejs/core",
+          "https://www.herodevs.com/vulnerability-directory/cve-2024-9506"
+        ]
       }
     ],
     "extractors": {

diff --git a/repository/jsrepository.json b/repository/jsrepository.json
@@ -5836,6 +5836,27 @@
         "info": [
           "https://github.com/vuejs/vue/releases/tag/v2.6.11"
         ]
+      },
+      {
+        "atOrAbove": "2.0.0-alpha.1",
+        "below": "3.0.0-alpha.0",
+        "cwe": [
+          "CWE-1333"
+        ],
+        "severity": "low",
+        "identifiers": {
+          "summary": "ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function",
+          "CVE": [
+            "CVE-2024-9506"
+          ],
+          "githubID": "GHSA-5j4c-8p2g-v4jx"
+        },
+        "info": [
+          "https://github.com/advisories/GHSA-5j4c-8p2g-v4jx",
+          "https://nvd.nist.gov/vuln/detail/CVE-2024-9506",
+          "https://github.com/vuejs/core",
+          "https://www.herodevs.com/vulnerability-directory/cve-2024-9506"
+        ]
       }
     ],
     "extractors": {