Bundled vue, version 2.6.14 is vulnerable CVE-2024-9506 #7982

Unanswered

spurreiter asked this question in Error / Bug Report

spurreiter
Apr 14, 2026

Security scanning the application with zaproxy shows the following issue.

The identified library vue, version 2.6.14 is vulnerable.

https://github.com/vuejs/core
GHSA-5j4c-8p2g-v4jx
https://www.herodevs.com/vulnerability-directory/cve-2024-9506
https://nvd.nist.gov/vuln/detail/CVE-2024-9506

Please update the vue dev-dependency to the current 2.7.16.

Replies: 0 comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment