← Back

CVE-2024-9506

nvd nist
Published: Oct 15, 2024Modified: Jun 17, 2026Deferred

JSON object

Loading...
3.7
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 2.2 / Impact: 1.4
Source: 36c7be3b-2937-45df-85ea-ca7133ea542c (Secondary)

Description

Improper regular expression in Vue's parseHTML function leads to a potential regular expression denial of service vulnerability.

Related CWEs

CWE-1333
Inefficient Regular Expression Complexity
The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.

References (1)

Source: 36c7be3b-2937-45df-85ea-ca7133ea542c

Timeline

No history available yet.