cvedb.io
CVE-2025-5897
MEDIUM · CVSS 4.3
EPSS exploitation probability: 0%
Published 2025-06-09T21:15:47.707 · Last modified 2026-06-17T09:48:58.727

Summary

A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely.

Affected products

vuejs — vue_cli

Does this affect you?

Add your gear to cvedb and we'll alert you only when vuejs ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.