WS-2017-3738 | Mend Vulnerability Database

Vulnerability DatabaseWS-2017-3738

WS-2017-3738

Published:May 19, 2026

Updated:May 19, 2026

Vue-Project before version 2.3.0-beta.1 has a possible xss vulnerability.

Affected Packages

vue (CDN_JS):

Affected version(s) >=0.6.0 <2.3.0

Fix Suggestion:

Update to version 2.3.0

vue (NPM):

Affected version(s) >=0.0.0 <2.3.0

Fix Suggestion:

Update to version 2.3.0

ss.form (NUGET):

Affected version(s) >=1.1.0 <2.0.1-beta

Fix Suggestion:

Update to version 2.0.1-beta

vue (NUGET):

Affected version(s) >=1.0.22 <2.2.2

Fix Suggestion:

Update to version 2.2.2

ss.hits (NUGET):

Affected version(s) >=1.0.1 <1.0.29

Fix Suggestion:

Update to version 1.0.29

ss.govinteract (NUGET):

Affected version(s) >=1.0.26 <1.0.36-beta

Fix Suggestion:

Update to version 1.0.36-beta

blazings.vuejs (NUGET):

Affected version(s) >=2.1.6 <=2.1.10

Fix Suggestion:

Update to version no_fix

boin.mvc.template (NUGET):

Affected version(s) >=1.0.0 <=1.1.0

Fix Suggestion:

Update to version no_fix

ss.poll (NUGET):

Affected version(s) >=1.1.13 <1.2.0-beta

Fix Suggestion:

Update to version 1.2.0-beta

ss.home (NUGET):

Affected version(s) >=1.0.9 <1.0.33

Fix Suggestion:

Update to version 1.0.33

vue (NUGET):

Affected version(s) =2.2.6 <2.3.0

Fix Suggestion:

Update to version 2.3.0

vue.js (NUGET):

Affected version(s) =1.0.22

Fix Suggestion:

Update to version no_fix

ss.login (NUGET):

Affected version(s) >=1.1.7 <=1.1.48

Fix Suggestion:

Update to version no_fix

webgamex.comment (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

codebois/qrcodeslibrary (PHP):

Affected version(s) >=dev-element-history <v1.0.0

Fix Suggestion:

Update to version v1.0.0

webreinvent/vaahcms (PHP):

Affected version(s) =dev-feature/config-fixes <dev-feature/database-export-and-import

Fix Suggestion:

Update to version dev-feature/database-export-and-import

tianfuunion/mark-resources (PHP):

Affected version(s) >=dev-master <=0.1

Fix Suggestion:

Update to version no_fix

devisephp/cms (PHP):

Affected version(s) =dev-unstable <v.2.1.0-beta.4

Fix Suggestion:

Update to version v.2.1.0-beta.4

wizclumsy/utils (PHP):

Affected version(s) >=dev-dev <0.8.0

Fix Suggestion:

Update to version 0.8.0

ninjacn/voyager (PHP):

Affected version(s) >=dev-testing/test-mulitple-database-drivers <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

f24aalam/voyager-material (PHP):

Affected version(s) >=dev-testing/test-mulitple-database-drivers <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

chictem/chictem (PHP):

Affected version(s) =dev-master <v0.1.0

Fix Suggestion:

Update to version v0.1.0

smohe1991/persian-voyager (PHP):

Affected version(s) =v0.10.x-dev <v0.10.1

Fix Suggestion:

Update to version v0.10.1

ahmadsyamim/voyager (PHP):

Affected version(s) =v0.11.14 <1.0.x-dev

Fix Suggestion:

Update to version 1.0.x-dev

shjarah/voyager (PHP):

Affected version(s) =dev-testing/test-mulitple-database-drivers <dev-update-deps

Fix Suggestion:

Update to version dev-update-deps

streams/core (PHP):

Affected version(s) >=v1.1.250 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

hongyukeji/ebestmall-html (PHP):

Affected version(s) >=1.0.0 <1.1.3

Fix Suggestion:

Update to version 1.1.3

chandan07cse/elham (PHP):

Affected version(s) =dev-master <v1.0.0

Fix Suggestion:

Update to version v1.0.0

sodacms/sodacms (PHP):

Affected version(s) =dev-release/0.1 <0.1.1

Fix Suggestion:

Update to version 0.1.1

griffyn/voyager (PHP):

Affected version(s) >=dev-testing/test-mulitple-database-drivers <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

colee/yii2-vue (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/assets/vue/lodash.defaultsdeep-4.6.1 <1.0.3

Fix Suggestion:

Update to version 1.0.3

romjkeeeen/fix-cms-core1 (PHP):

Affected version(s) >=dev-dev-master <=dev-php8-dev-master

Fix Suggestion:

Update to version no_fix

wpzoom/social-icons-widget (PHP):

Affected version(s) >=4.2.1 <4.2.3

Fix Suggestion:

Update to version 4.2.3

yeswiki/yeswiki (PHP):

Affected version(s) =dev-fix-bazar-fields-bugs <dev-fix-bazar-local

Fix Suggestion:

Update to version dev-fix-bazar-local

baijunyao/laravel-bjyblog (PHP):

Affected version(s) >=v5.5.6.2 <v5.5.9.1

Fix Suggestion:

Update to version v5.5.9.1

ingwarp/folder (PHP):

Affected version(s) >=v0.1.26 <=v0.1.27

Fix Suggestion:

Update to version no_fix

tcg/voyager (PHP):

Affected version(s) =dev-testing/test-mulitple-database-drivers <dev-update-deps

Fix Suggestion:

Update to version dev-update-deps

pushman/pushman (PHP):

Affected version(s) >=2.3 <=2.5.0

Fix Suggestion:

Update to version no_fix

nerio93/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

x-cart-proj/x-cart-proj (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

zijinghua-dev/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

bitepeng/voyager_cn (PHP):

Affected version(s) =dev-testing/test-mulitple-database-drivers <v0.11.14

Fix Suggestion:

Update to version v0.11.14

verbb/patrol (PHP):

Affected version(s) =3.0.0 <dev-craft-3

Fix Suggestion:

Update to version dev-craft-3

yeswiki/yeswiki (PHP):

Affected version(s) >=dev-refacto-oldfield <dev-refacto/baz_rechercher

Fix Suggestion:

Update to version dev-refacto/baz_rechercher

talvbansal/easel (PHP):

Affected version(s) =dev-develop <dev-master

Fix Suggestion:

Update to version dev-master

gabrieltakacs/voyager (PHP):

Affected version(s) =dev-i18n

Fix Suggestion:

Update to version no_fix

anhnn78/voyager (PHP):

Affected version(s) >=dev-testing/test-mulitple-database-drivers <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

anomaly/streams-platform (PHP):

Affected version(s) >=v1.1.250 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

activelogiclabs/administration (PHP):

Affected version(s) >=dev-FieldComponentRefactoring <0.5.2

Fix Suggestion:

Update to version 0.5.2

streams/core (PHP):

Affected version(s) >=v1.2.138 <1.3.x-dev

Fix Suggestion:

Update to version 1.3.x-dev

cbidigital/voyager (PHP):

Affected version(s) >=dev-testing/test-mulitple-database-drivers <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

yewei-cao/noodle (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/decode-uri-component-0.2.2 <v0.03

Fix Suggestion:

Update to version v0.03

soda-framework/cms (PHP):

Affected version(s) =dev-release/0.4 <0.4.1

Fix Suggestion:

Update to version 0.4.1

3xw/cakephp-app (PHP):

Affected version(s) >=0.0.1 <3.5.0.0

Fix Suggestion:

Update to version 3.5.0.0

soda-framework/cms (PHP):

Affected version(s) =dev-release/0.1 <0.1.1

Fix Suggestion:

Update to version 0.1.1

yeswiki/yeswiki (PHP):

Affected version(s) >=dev-idea-for-composants <dev-improve-action-builder

Fix Suggestion:

Update to version dev-improve-action-builder

orchestra/foundation (PHP):

Affected version(s) >=v3.0.14 <v3.1.0

Fix Suggestion:

Update to version v3.1.0

jasonll/phalcon_wechat (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

yeswiki/yeswiki (PHP):

Affected version(s) >=dev-fix-bazarliste-param-agenda <dev-fix-card-title-entry

Fix Suggestion:

Update to version dev-fix-card-title-entry

novosga/novosga (PHP):

Affected version(s) =v3.0.x-dev <dev-dependabot/composer/twig/twig-3.14.0

Fix Suggestion:

Update to version dev-dependabot/composer/twig/twig-3.14.0

stevebauman/ithub (PHP):

Affected version(s) >=v0.0.37 <=v0.2.0

Fix Suggestion:

Update to version no_fix

novosga/novosga (PHP):

Affected version(s) =v2.0.x-dev <v2.0.1

Fix Suggestion:

Update to version v2.0.1

pushman/pushman (PHP):

Affected version(s) >=dev-develop <2.0.0-beta2

Fix Suggestion:

Update to version 2.0.0-beta2

wenkechen/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

gabootsoft/gaboot (PHP):

Affected version(s) >=v0.1.4 <v0.2.4

Fix Suggestion:

Update to version v0.2.4

devig/voyager (PHP):

Affected version(s) >=v0.11.0 <v1.0.0

Fix Suggestion:

Update to version v1.0.0

activelogiclabs/administration (PHP):

Affected version(s) >=5.3.2 <=5.3.5

Fix Suggestion:

Update to version no_fix

webgarden/mantisbt-todolists (PHP):

Affected version(s) =dev-feature/23-create-todo-on-report-issue

Fix Suggestion:

Update to version no_fix

docit/core (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

tobyokeke/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

yeswiki/yeswiki (PHP):

Affected version(s) >=dev-add-version-to-jsfiles <dev-auto-update-migrations

Fix Suggestion:

Update to version dev-auto-update-migrations

jarves/jarves (PHP):

Affected version(s) >=dev-feature/flysystem-integration <0.1.0-alpha

Fix Suggestion:

Update to version 0.1.0-alpha

artworx/omegacp (PHP):

Affected version(s) >=dev-master <=1.0.0

Fix Suggestion:

Update to version no_fix

tcg/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

joesama/entree (PHP):

Affected version(s) >=1.0.x-dev <3.6.x-dev

Fix Suggestion:

Update to version 3.6.x-dev

yewei-cao/noodle (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/socket.io-parser-and-browser-sync-and-socket.io-4.2.1 <dev-feature/admin

Fix Suggestion:

Update to version dev-feature/admin

jarves/jarves (PHP):

Affected version(s) =0.2.0-alpha <dev-angular-es6

Fix Suggestion:

Update to version dev-angular-es6

htmlburger/form-kit (PHP):

Affected version(s) >=v0.1.1 <=v0.1.3

Fix Suggestion:

Update to version no_fix

bottelet/flarepoint (PHP):

Affected version(s) >=1.1 <dev-dependabot/npm_and_yarn/eventsource-1.1.1

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/eventsource-1.1.1

voyager-admin/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

leelam/cloudsms (PHP):

Affected version(s) >=dev-master <v0.1.5

Fix Suggestion:

Update to version v0.1.5

htmlburger/form-kit (PHP):

Affected version(s) =dev-master <v0.1.0

Fix Suggestion:

Update to version v0.1.0

shjarah/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

ingwarp/folder (PHP):

Affected version(s) =dev-master <v0.1.1

Fix Suggestion:

Update to version v0.1.1

sodacms/sodacms (PHP):

Affected version(s) =dev-release/0.0 <0.0.1

Fix Suggestion:

Update to version 0.0.1

novosga/novosga (PHP):

Affected version(s) =2.0.0-RC1 <v2.0.0-RC1

Fix Suggestion:

Update to version v2.0.0-RC1

orchestra/foundation (PHP):

Affected version(s) >=v3.1.4 <v3.3.0-BETA1

Fix Suggestion:

Update to version v3.3.0-BETA1

dfz/dola (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

yhq/laravel (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

bottelet/flarepoint (PHP):

Affected version(s) =V1 <dev-dependabot/npm_and_yarn/path-parse-1.0.7

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/path-parse-1.0.7

baijunyao/laravel-bjyblog (PHP):

Affected version(s) >=v1.4.0 <dev-dependabot/composer/composer/composer-1.10.22

Fix Suggestion:

Update to version dev-dependabot/composer/composer/composer-1.10.22

soda-framework/cms (PHP):

Affected version(s) =dev-release/0.5 <0.5.1

Fix Suggestion:

Update to version 0.5.1

zijinghua-dev/voyager (PHP):

Affected version(s) =dev-testing/test-mulitple-database-drivers <0.1.x-dev

Fix Suggestion:

Update to version 0.1.x-dev

typerocket/laravel (PHP):

Affected version(s) =v2.1.4 <v2.1.5

Fix Suggestion:

Update to version v2.1.5

fiedsch/ligaverwaltung-bundle (PHP):

Affected version(s) >=0.0.1 <0.3.0

Fix Suggestion:

Update to version 0.3.0

yeswiki/yeswiki (PHP):

Affected version(s) =dev-update-composants-V2 <dev-dependabot/composer/nesbot/carbon-2.72.6

Fix Suggestion:

Update to version dev-dependabot/composer/nesbot/carbon-2.72.6

zachleigh/laravel-colors (PHP):

Affected version(s) =v0.3.0 <v0.3.1

Fix Suggestion:

Update to version v0.3.1

yangtaihua/streams-platform (PHP):

Affected version(s) >=v1.1.250 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

yeswiki/yeswiki (PHP):

Affected version(s) =dev-fix-conflict-varname-file-for-buffr <dev-fix-creation-empty-id_fiche

Fix Suggestion:

Update to version dev-fix-creation-empty-id_fiche

yadjet/yii2-rbac (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

timtoday/voyager-cn (PHP):

Affected version(s) >=dev-master <=1.0.4.3

Fix Suggestion:

Update to version no_fix

yanev/laraadmin (PHP):

Affected version(s) >=dev-master <=2.0.2

Fix Suggestion:

Update to version no_fix

hamzz/voyager (PHP):

Affected version(s) >=dev-testing/test-mulitple-database-drivers <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

luzucheng59/voyager (PHP):

Affected version(s) =dev-testing/test-mulitple-database-drivers <dev-analysis-zdw0Qp

Fix Suggestion:

Update to version dev-analysis-zdw0Qp

purepanel/streams-platform (PHP):

Affected version(s) >=v1.2.138 <v1.3.0

Fix Suggestion:

Update to version v1.3.0

streams/core (PHP):

Affected version(s) =1.1.x-dev <v1.1.0

Fix Suggestion:

Update to version v1.1.0

yeswiki/yeswiki (PHP):

Affected version(s) =dev-win-server-compatibility <dev-refacto/baz_rechercher-fix1

Fix Suggestion:

Update to version dev-refacto/baz_rechercher-fix1

larashuo/laracrud (PHP):

Affected version(s) >=v1.0.1 <=v1.0.2

Fix Suggestion:

Update to version no_fix

yeswiki/yeswiki (PHP):

Affected version(s) =dev-links_params <dev-lint-format

Fix Suggestion:

Update to version dev-lint-format

yeswiki/yeswiki (PHP):

Affected version(s) >=dev-refacto/form-controller <dev-refactor-bazar

Fix Suggestion:

Update to version dev-refactor-bazar

yeswiki/yeswiki (PHP):

Affected version(s) >=dev-editiframe_page <dev-enum-field-simplify-name

Fix Suggestion:

Update to version dev-enum-field-simplify-name

verbb/patrol (PHP):

Affected version(s) >=3.0.1 <4.0.0

Fix Suggestion:

Update to version 4.0.0

anomaly/streams-platform (PHP):

Affected version(s) =1.1.x-dev <v1.1.0

Fix Suggestion:

Update to version v1.1.0

yeswiki/yeswiki (PHP):

Affected version(s) =dev-Prepare-section-for-grid <dev-aceditor-fix

Fix Suggestion:

Update to version dev-aceditor-fix

alimranahmed/larablog (PHP):

Affected version(s) >=dev-dependabot/composer/laravel/framework-8.22.1 <dev-dependabot/composer/laravel/framework-8.75.0

Fix Suggestion:

Update to version dev-dependabot/composer/laravel/framework-8.75.0

nch/codeforlife (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

yeswiki/yeswiki (PHP):

Affected version(s) >=dev-fix-custom-squelettes-listing <dev-fix-edit-button-on-link

Fix Suggestion:

Update to version dev-fix-edit-button-on-link

luzucheng59/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

clumsy/utils (PHP):

Affected version(s) >=dev-dev <0.8.0

Fix Suggestion:

Update to version 0.8.0

alimranahmed/larablog (PHP):

Affected version(s) =dev-dependabot/composer/symfony/http-kernel-5.4.2 <dev-dependabot/npm_and_yarn/vite-5.4.6

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/vite-5.4.6

zzhh9857/voyager (PHP):

Affected version(s) >=dev-testing/test-mulitple-database-drivers <v0.11.12

Fix Suggestion:

Update to version v0.11.12

qieangel2013/zys (PHP):

Affected version(s) =dev-master <0.1.0

Fix Suggestion:

Update to version 0.1.0

soda-framework/cms (PHP):

Affected version(s) =dev-release/0.3 <0.3.1

Fix Suggestion:

Update to version 0.3.1

yewei-cao/noodle (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/path-parse-1.0.7 <dev-dependabot/composer/symfony/http-foundation-2.7.51

Fix Suggestion:

Update to version dev-dependabot/composer/symfony/http-foundation-2.7.51

moxyrus/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

wpzoom/social-icons-widget (PHP):

Affected version(s) =4.1.3 <4.2.0

Fix Suggestion:

Update to version 4.2.0

visiosoft/streams-platform (PHP):

Affected version(s) >=v1.2.138 <v1.3.0

Fix Suggestion:

Update to version v1.3.0

yeswiki/yeswiki (PHP):

Affected version(s) =dev-improve-merge-fields-entry <dev-improve-metadata-field

Fix Suggestion:

Update to version dev-improve-metadata-field

adaptcms/adaptcms (PHP):

Affected version(s) >=dev-4.0-alpha <4.0

Fix Suggestion:

Update to version 4.0

ilhanet/erpnet-widget-resource (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

digiwise/digirock (PHP):

Affected version(s) >=dev-master <=v1.5

Fix Suggestion:

Update to version no_fix

typerocket/laravel (PHP):

Affected version(s) >=v1.0.6 <v2.1.3

Fix Suggestion:

Update to version v2.1.3

windwalker/phoenix (PHP):

Affected version(s) >=1.1 <dev-dependabot/npm_and_yarn/minimist-1.2.6

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/minimist-1.2.6

emohamed/form-kit (PHP):

Affected version(s) >=v0.1.1 <=v0.1.3

Fix Suggestion:

Update to version no_fix

davyin/dyniva_ui (PHP):

Affected version(s) =1.0.0 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

leo-unglaub/contao-vuejs (PHP):

Affected version(s) >=dev-master <=0.1.30

Fix Suggestion:

Update to version no_fix

mengniang/mengniang (PHP):

Affected version(s) >=dev-master <=v1.0

Fix Suggestion:

Update to version no_fix

windwalker/phoenix (PHP):

Affected version(s) =1.2.7 <1.3

Fix Suggestion:

Update to version 1.3

novosga/novosga (PHP):

Affected version(s) =v2.2.x-dev <dev-dependabot/composer/twig/twig-2.14.11

Fix Suggestion:

Update to version dev-dependabot/composer/twig/twig-2.14.11

anla/skipper (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

baijunyao/laravel-bjyadmin (PHP):

Affected version(s) >=dev-master <v3.0.0

Fix Suggestion:

Update to version v3.0.0

selvinortiz/patrol (PHP):

Affected version(s) >=dev-dev <dev-craft-3

Fix Suggestion:

Update to version dev-craft-3

bottelet/flarepoint (PHP):

Affected version(s) >=1.1.2 <1.1.4

Fix Suggestion:

Update to version 1.1.4

dwij/laraadmin (PHP):

Affected version(s) =dev-Unit-Testing-1 <1.0.1

Fix Suggestion:

Update to version 1.0.1

ericvvc9/voyager (PHP):

Affected version(s) >=dev-testing/test-mulitple-database-drivers <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

xiaokus/voyager (PHP):

Affected version(s) =dev-master <ls

Fix Suggestion:

Update to version ls

luna/material-theme (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

azuracast/azuracast (PHP):

Affected version(s) =0.6.0 <0.8.0

Fix Suggestion:

Update to version 0.8.0

mrcore/bootswatch-theme (PHP):

Affected version(s) =5.8.x-dev <5.8.1

Fix Suggestion:

Update to version 5.8.1

doode/voyager (PHP):

Affected version(s) >=dev-testing/test-mulitple-database-drivers <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

oakcms/oakcms (PHP):

Affected version(s) >=dev-master <=v0.0.1-beta.0.1

Fix Suggestion:

Update to version no_fix

joesama/entree (PHP):

Affected version(s) =dev-master <dev-nifty

Fix Suggestion:

Update to version dev-nifty

sd25/extended-voyager (PHP):

Affected version(s) >=dev-testing/test-mulitple-database-drivers <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

mrcore/bootswatch-theme (PHP):

Affected version(s) >=5.3.0 <5.8.0

Fix Suggestion:

Update to version 5.8.0

hebrahimzadeh/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

alimranahmed/larablog (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/lodash-4.17.21 <dev-dependabot/npm_and_yarn/rollup-4.22.4

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/rollup-4.22.4

yeswiki/yeswiki (PHP):

Affected version(s) =dev-some-improvement-ab-admins-actions <dev-sync-createur-owner-for-entry

Fix Suggestion:

Update to version dev-sync-createur-owner-for-entry

yeswiki/yeswiki (PHP):

Affected version(s) =dev-errors-management <dev-extra-fields

Fix Suggestion:

Update to version dev-extra-fields

pheye/voyager (PHP):

Affected version(s) >=dev-develop <v0.9.1

Fix Suggestion:

Update to version v0.9.1

kayrules/solatjakim-api-site (PHP):

Affected version(s) =dev-master <dev-version-1.0

Fix Suggestion:

Update to version dev-version-1.0

yeswiki/yeswiki (PHP):

Affected version(s) =dev-doryphore <dev-doryphore-dev

Fix Suggestion:

Update to version dev-doryphore-dev

mrcore/bootswatch-theme (PHP):

Affected version(s) >=dev-develop <dev-vue

Fix Suggestion:

Update to version dev-vue

webreinvent/vaahcms (PHP):

Affected version(s) =dev-feature/release-test <dev-feature/resolve-some-issue

Fix Suggestion:

Update to version dev-feature/resolve-some-issue

yeswiki/yeswiki (PHP):

Affected version(s) =dev-fix-update-version-in-wakka-cerco <dev-fix/extension-import-namespace

Fix Suggestion:

Update to version dev-fix/extension-import-namespace

chatfeed/yii2-vue-admin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

leelam/cloudsms (PHP):

Affected version(s) >=v0.1.6 <=v0.1.7

Fix Suggestion:

Update to version no_fix

mrcore/bootswatch-theme (PHP):

Affected version(s) >=1.0.6 <2.0.10

Fix Suggestion:

Update to version 2.0.10

alimranahmed/larablog (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/y18n-3.2.2 <dev-174-upgrade-to-Laravel-11

Fix Suggestion:

Update to version dev-174-upgrade-to-Laravel-11

sodacms/sodacms (PHP):

Affected version(s) =dev-release/0.5 <0.5.1

Fix Suggestion:

Update to version 0.5.1

oburatongoi/productivity (PHP):

Affected version(s) >=0.0.9 <0.0.13

Fix Suggestion:

Update to version 0.0.13

ddphp/webos (PHP):

Affected version(s) >=dev-master <=v1.0.2

Fix Suggestion:

Update to version no_fix

namespace/voyager_fork (PHP):

Affected version(s) =dev-testing/test-mulitple-database-drivers <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

phambinh/phambinhcms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

nadminpanel/adminpanel (PHP):

Affected version(s) >=dev-master <=0.1.0

Fix Suggestion:

Update to version no_fix

talv86/easel (PHP):

Affected version(s) =dev-develop <dev-master

Fix Suggestion:

Update to version dev-master

alimranahmed/larablog (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/codemirror-5.61.0 <dev-dependabot/composer/symfony/http-foundation-7.1.7

Fix Suggestion:

Update to version dev-dependabot/composer/symfony/http-foundation-7.1.7

yeswiki/yeswiki (PHP):

Affected version(s) >=dev-not-rendering-empty-fields <dev-pdfjs-by-yarn

Fix Suggestion:

Update to version dev-pdfjs-by-yarn

zijinhua/voyager (PHP):

Affected version(s) >=dev-testing/test-mulitple-database-drivers <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

kodicms/core (PHP):

Affected version(s) >=v0.6.36 <=v0.9.52

Fix Suggestion:

Update to version no_fix

webgarden/mantisbt-todolists (PHP):

Affected version(s) >=v2.1.0 <v2.4.0

Fix Suggestion:

Update to version v2.4.0

oburatongoi/productivity (PHP):

Affected version(s) >=0.1.0 <0.3.26

Fix Suggestion:

Update to version 0.3.26

yeswiki/yeswiki (PHP):

Affected version(s) >=dev-bazar-custom-template <dev-bruno

Fix Suggestion:

Update to version dev-bruno

mrcore/bootswatch-theme (PHP):

Affected version(s) >=5.8.2 <=5.8.3

Fix Suggestion:

Update to version no_fix

lisandrop05/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

baijunyao/laravel-bjyblog (PHP):

Affected version(s) >=v1.0.0 <dev-dependabot/npm_and_yarn/minimist-1.2.6

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/minimist-1.2.6

itplato/phpanalysis (PHP):

Affected version(s) =dev-master <v3.0_release

Fix Suggestion:

Update to version v3.0_release

yeswiki/yeswiki (PHP):

Affected version(s) >=dev-fix-image-delete <dev-fix-mail-sendmail

Fix Suggestion:

Update to version dev-fix-mail-sendmail

adaptcms/adaptcms (PHP):

Affected version(s) =4.0.x-dev

Fix Suggestion:

Update to version no_fix

kodicms/core (PHP):

Affected version(s) =dev-master <v0.0.1

Fix Suggestion:

Update to version v0.0.1

alimranahmed/larablog (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/hosted-git-info-2.8.9 <dev-dependabot/npm_and_yarn/braces-3.0.3

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/braces-3.0.3

yeswiki/yeswiki (PHP):

Affected version(s) =dev-proposal-for-679-prevent-white-page-at-update <dev-Issue-884

Fix Suggestion:

Update to version dev-Issue-884

gathernholding/yii-bootstrap-bower (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

sodacms/sodacms (PHP):

Affected version(s) =dev-release/0.4 <0.4.1

Fix Suggestion:

Update to version 0.4.1

simplon/component_mvc (PHP):

Affected version(s) >=dev-master <=0.0.2

Fix Suggestion:

Update to version no_fix

krzysiekpiasecki/gentelella (PHP):

Affected version(s) =dev-s4.0

Fix Suggestion:

Update to version no_fix

yeswiki/yeswiki (PHP):

Affected version(s) =dev-add-displaypdf-button <dev-add-management-of-custom-fields

Fix Suggestion:

Update to version dev-add-management-of-custom-fields

luna/tjwiringa-theme (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

luzucheng59/voyager (PHP):

Affected version(s) >=v0.11.10 <v0.11.12

Fix Suggestion:

Update to version v0.11.12

pro-cms/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

novosga/novosga (PHP):

Affected version(s) =dev-dependabot/composer/symfony/cache-4.3.11 <dev-dependabot/composer/symfony/serializer-4.4.35

Fix Suggestion:

Update to version dev-dependabot/composer/symfony/serializer-4.4.35

yewei-cao/noodle (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/engine.io-and-browser-sync-and-socket.io-6.2.1 <dev-dependabot/npm_and_yarn/socket.io-2.4.0

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/socket.io-2.4.0

friendsofvictoire/markdown-widget (PHP):

Affected version(s) >=dev-master <=2.1.0

Fix Suggestion:

Update to version no_fix

novosga/novosga (PHP):

Affected version(s) =dev-fix/393_service_max_length <dev-fix/394_deleted_priority

Fix Suggestion:

Update to version dev-fix/394_deleted_priority

craftcms/vue-asset (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

novosga/novosga (PHP):

Affected version(s) >=dev-fix/rename_mercure_var <v0.5.1

Fix Suggestion:

Update to version v0.5.1

pheye/voyager (PHP):

Affected version(s) =dev-release/v0.11 <v0.11.0

Fix Suggestion:

Update to version v0.11.0

yela528/g9zz-voyager (PHP):

Affected version(s) =dev-master <v1.0

Fix Suggestion:

Update to version v1.0

novosga/novosga (PHP):

Affected version(s) >=dev-fix/395_reiniciar_senhas <=dev-fix/401_usuario_id

Fix Suggestion:

Update to version no_fix

yangtaihua/streams-platform (PHP):

Affected version(s) >=v1.2.138 <v1.3.0

Fix Suggestion:

Update to version v1.3.0

devuniverse/voyager (PHP):

Affected version(s) >=dev-testing/test-mulitple-database-drivers <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

mrpk-dev/voyager (PHP):

Affected version(s) >=dev-testing/test-mulitple-database-drivers <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

andrzejkupczyk/mantis-todolists (PHP):

Affected version(s) =dev-master <dev-override_http_server_restrictions

Fix Suggestion:

Update to version dev-override_http_server_restrictions

baijunyao/laravel-bjyblog (PHP):

Affected version(s) >=v5.3.0.4 <v5.5.6.1

Fix Suggestion:

Update to version v5.5.6.1

lobbykit/intra (PHP):

Affected version(s) =0.2.1 <v0.2.1

Fix Suggestion:

Update to version v0.2.1

yeswiki/yeswiki (PHP):

Affected version(s) =dev-fix-search-without-no-id-fiche <dev-fix-semantic-fields

Fix Suggestion:

Update to version dev-fix-semantic-fields

novosga/novosga (PHP):

Affected version(s) >=v2.0.8 <dev-feature/novosga-v2.2

Fix Suggestion:

Update to version dev-feature/novosga-v2.2

visiosoft/streams-platform (PHP):

Affected version(s) >=v1.1.250 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

emohamed/form-kit (PHP):

Affected version(s) =dev-master <v0.1.0

Fix Suggestion:

Update to version v0.1.0

colee/yii2-vue (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/assets/vue/karma-6.3.16 <=dev-dependabot/npm_and_yarn/assets/vue/y18n-3.2.2

Fix Suggestion:

Update to version no_fix

erenkucukersoftware/voyager (PHP):

Affected version(s) >=dev-testing/test-mulitple-database-drivers <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

yewei-cao/noodle (PHP):

Affected version(s) >=dev-dependabot/composer/guzzlehttp/guzzle-6.5.8 <dev-dependabot/npm_and_yarn/y18n-3.2.2

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/y18n-3.2.2

purepanel/streams-platform (PHP):

Affected version(s) >=v1.1.250 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

yeswiki/yeswiki (PHP):

Affected version(s) >=dev-flying-bar-display-at-right-place <dev-groups

Fix Suggestion:

Update to version dev-groups

andrzejkupczyk/mantis-todolists (PHP):

Affected version(s) >=v2.1.0 <v2.3.0

Fix Suggestion:

Update to version v2.3.0

yeswiki/yeswiki (PHP):

Affected version(s) >=dev-refacto/baz_voir_fiche <dev-refacto/fix-radio-list-field

Fix Suggestion:

Update to version dev-refacto/fix-radio-list-field

larashuo/laracrud (PHP):

Affected version(s) =dev-master <v1.0.0

Fix Suggestion:

Update to version v1.0.0

selvinortiz/patrol (PHP):

Affected version(s) >=3.0.1 <3.1.3

Fix Suggestion:

Update to version 3.1.3

yeswiki/yeswiki (PHP):

Affected version(s) =dev-remove-error-for-bazar-field-function <dev-rip-carte_google

Fix Suggestion:

Update to version dev-rip-carte_google

yewei-cao/noodle (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/hosted-git-info-2.8.9 <dev-dependabot/npm_and_yarn/elliptic-6.5.3

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/elliptic-6.5.3

soda-framework/cms (PHP):

Affected version(s) =dev-release/0.0 <0.0.1

Fix Suggestion:

Update to version 0.0.1

anomaly/streams-platform (PHP):

Affected version(s) >=v1.2.138 <1.3.x-dev

Fix Suggestion:

Update to version 1.3.x-dev

friparia/admin (PHP):

Affected version(s) =dev-semanti-ui

Fix Suggestion:

Update to version no_fix

wpzoom/social-icons-widget (PHP):

Affected version(s) >=4.2.5 <dev-wp58-fixes

Fix Suggestion:

Update to version dev-wp58-fixes

yeswiki/yeswiki (PHP):

Affected version(s) =dev-improve-bazaraction-guard <dev-improve-link-traking

Fix Suggestion:

Update to version dev-improve-link-traking

idci/extra-form-bundle (PHP):

Affected version(s) >=v2.0.0 <v2.0.5

Fix Suggestion:

Update to version v2.0.5

davestewart/sketchpad (PHP):

Affected version(s) >=v0.2 <v1.0.0-beta

Fix Suggestion:

Update to version v1.0.0-beta

sodacms/sodacms (PHP):

Affected version(s) =dev-release/0.3 <0.3.1

Fix Suggestion:

Update to version 0.3.1

semisalov/fix-cms-core (PHP):

Affected version(s) >=dev-dev-master <=dev-php8-dev-master

Fix Suggestion:

Update to version no_fix

qieangel2013/zys (PHP):

Affected version(s) >=0.1.9 <=2.0.0.2

Fix Suggestion:

Update to version no_fix

gabrieltakacs/voyager (PHP):

Affected version(s) =v0.10.x-dev <v0.10.1

Fix Suggestion:

Update to version v0.10.1

alimranahmed/larablog (PHP):

Affected version(s) =dev-develop <dev-main

Fix Suggestion:

Update to version dev-main

yeswiki/yeswiki (PHP):

Affected version(s) =v4.0.0-rc.1 <v4.1.0

Fix Suggestion:

Update to version v4.1.0

whb/wxyzadmin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

baijunyao/laravel-bjyadmin (PHP):

Affected version(s) >=v3.0.1 <=5.4.x-dev

Fix Suggestion:

Update to version no_fix

smohe1991/persian-voyager (PHP):

Affected version(s) >=dev-add-postgres-geometry <v0.9.1

Fix Suggestion:

Update to version v0.9.1

novosga/novosga (PHP):

Affected version(s) =dev-v2.0.7-fix-reset <v2.0.7

Fix Suggestion:

Update to version v2.0.7

zzhh9857/voyager (PHP):

Affected version(s) =v0.11.14 <1.0.x-dev

Fix Suggestion:

Update to version 1.0.x-dev

yeswiki/yeswiki (PHP):

Affected version(s) >=dev-performer-more-mixing <dev-proposal-to-prevent-sql-error

Fix Suggestion:

Update to version dev-proposal-to-prevent-sql-error

alimranahmed/larablog (PHP):

Affected version(s) >=4.0.0 <4.1.0

Fix Suggestion:

Update to version 4.1.0

baijunyao/laravel-bjyblog (PHP):

Affected version(s) =v1.3.0 <dev-dependabot/npm_and_yarn/dns-packet-1.3.4

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/dns-packet-1.3.4

stevebauman/ithub (PHP):

Affected version(s) =dev-master <v0.0.1

Fix Suggestion:

Update to version v0.0.1

joesama/entree (PHP):

Affected version(s) =dev-analysis-8Qa9gp

Fix Suggestion:

Update to version no_fix

inkwell/cms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

yeswiki/yeswiki (PHP):

Affected version(s) =dev-fix-performer-order-action <dev-fix-remove-warning-in-bazar.fonct

Fix Suggestion:

Update to version dev-fix-remove-warning-in-bazar.fonct

Related Resources (2)

https://github.com/vuejs/vue/commit/1e37633567f5d015db24ae0210b1adb4b1c3d355

https://github.com/vuejs/vue/issues/5351

Do you need more information?

CVSS v4

Base Score:

6.9

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

NONE

Vulnerable System Confidentiality

LOW

Vulnerable System Integrity

LOW

Vulnerable System Availability

NONE

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE

AI app security

Mend AI

Application security

Mend AppSec

Dependency management

Mend Renovate

Expand coverage

Runtime and beyond

AI security

Code security

Supply chain security

Compliance & reporting

vs. AI security tools

vs. AppSec tools

Buyer’s guides

About Mend.io

Partners & people

Customers

Learn & explore

Guides

Developers hub