CVE-2024-9506
Fixed in a distro release EPSS <1%CVSS 3.7
Improper regular expression in Vue's parseHTML function leads to a potential regular expression denial of service vulnerability.
Products: vue
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | vue | 3.0.0-alpha.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | commercial-gitlab-rails-ee-19.1 | 19.1.7-r3 |
| Chainguard | commercial-gitlab-rails-ee-19.2 | 19.2.7-r1 |
| Chainguard | commercial-gitlab-rails-ee-19.3 | 19.3.3-r1 |
| Chainguard | commercial-gitlab-rails-ee-19.4 | 19.4.1-r1 |
| Chainguard | commercial-gitlab-rails-ee-fips-19.1 | 19.1.9-r0 |
| Chainguard | commercial-gitlab-rails-ee-fips-19.2 | 19.2.7-r1 |
| Chainguard | commercial-gitlab-rails-ee-fips-19.3 | 19.3.3-r1 |
| Chainguard | commercial-gitlab-rails-ee-fips-19.4 | 19.4.1-r1 |
| Chainguard | gitlab-rails-ce-18.1 | no fix |
| Chainguard | gitlab-rails-ce-18.10 | no fix |
| Chainguard | gitlab-rails-ce-18.11 | 18.11.13-r0 |
| Chainguard | gitlab-rails-ce-18.5 | no fix |
| Chainguard | gitlab-rails-ce-18.6 | no fix |
| Chainguard | gitlab-rails-ce-18.7 | no fix |
| Chainguard | gitlab-rails-ce-18.8 | no fix |
| Chainguard | gitlab-rails-ce-18.9 | no fix |
| Chainguard | gitlab-rails-ce-19.0 | 19.0.10-r0 |
| Chainguard | gitlab-rails-ce-19.1 | 19.1.9-r0 |
| Chainguard | gitlab-rails-ce-19.2 | no fix |
| Chainguard | gitlab-rails-ce-19.3 | 19.3.6-r0 |
| Chainguard | gitlab-rails-ce-19.4 | no fix |
| Chainguard | gitlab-rails-ce-19.5 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.1 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.10 | 18.10.8-r8 |
| Chainguard | gitlab-rails-ce-fips-18.11 | 18.11.12-r2 |
| Chainguard | gitlab-rails-ce-fips-18.5 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.6 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.7 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.8 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.9 | 18.9.8-r8 |
| Chainguard | gitlab-rails-ce-fips-19.0 | 19.0.9-r3 |
| Chainguard | gitlab-rails-ce-fips-19.1 | 19.1.8-r9 |
| Chainguard | gitlab-rails-ce-fips-19.2 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.3 | 19.3.3-r8 |
| Chainguard | gitlab-rails-ce-fips-19.4 | 19.4.1-r8 |
| Chainguard | nextcloud-server-31 | no fix |
| Chainguard | nextcloud-server-32 | no fix |
| Chainguard | nextcloud-server-33 | no fix |
| Chainguard | nextcloud-server-34 | no fix |
| Chainguard | nextcloud-server-35 | no fix |
| Chainguard | semaphore | 0 |
| Wolfi | nextcloud-server-32 | no fix |
| Wolfi | nextcloud-server-33 | no fix |