WS-2018-0163 | Mend Vulnerability Database

Vulnerability DatabaseWS-2018-0163

WS-2018-0163

Published:May 19, 2026

Updated:May 19, 2026

Vue.js project before version 2.4.3 in has a possible xss vector

Affected Packages

vue (CDN_JS):

Affected version(s) >=2.0.0 <2.4.3

Fix Suggestion:

Update to version 2.4.3

vue (NPM):

Affected version(s) >=2.0.0 <2.4.3

Fix Suggestion:

Update to version 2.4.3

vue (NUGET):

Affected version(s) >=2.2.6 <2.4.3

Fix Suggestion:

Update to version 2.4.3

ss.magazine (NUGET):

Affected version(s) >=1.1.15-beta <=1.1.18

Fix Suggestion:

Update to version no_fix

vue.js.developers.version (NUGET):

Affected version(s) =2.4.2

Fix Suggestion:

Update to version no_fix

ss.govinteract (NUGET):

Affected version(s) >=1.0.8 <1.0.36-beta

Fix Suggestion:

Update to version 1.0.36-beta

ss.hits (NUGET):

Affected version(s) >=1.0.1 <1.0.29

Fix Suggestion:

Update to version 1.0.29

ss.govpublic (NUGET):

Affected version(s) >=1.0.8 <=1.0.34

Fix Suggestion:

Update to version no_fix

vue (NUGET):

Affected version(s) >=2.0.0 <2.2.2

Fix Suggestion:

Update to version 2.2.2

ss.poll (NUGET):

Affected version(s) >=1.1.13 <1.2.0-beta

Fix Suggestion:

Update to version 1.2.0-beta

vuetemplate (NUGET):

Affected version(s) =0.1.0

Fix Suggestion:

Update to version no_fix

ss.home (NUGET):

Affected version(s) >=1.0.9 <=1.0.46

Fix Suggestion:

Update to version no_fix

webgamex.comment (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

ss.photo (NUGET):

Affected version(s) >=1.0.6 <1.1.3-beta

Fix Suggestion:

Update to version 1.1.3-beta

ss.payment (NUGET):

Affected version(s) >=1.1.0 <=1.1.54

Fix Suggestion:

Update to version no_fix

blazings.vuejs (NUGET):

Affected version(s) >=2.1.6 <=2.1.10

Fix Suggestion:

Update to version no_fix

ss.form (NUGET):

Affected version(s) >=1.1.0 <2.0.1-beta

Fix Suggestion:

Update to version 2.0.1-beta

zzb.ocean.nuget.libs (NUGET):

Affected version(s) =1.0.2

Fix Suggestion:

Update to version no_fix

ss.reward (NUGET):

Affected version(s) >=1.1.8 <1.1.34-beta

Fix Suggestion:

Update to version 1.1.34-beta

ss.login (NUGET):

Affected version(s) >=1.1.7 <=1.1.48

Fix Suggestion:

Update to version no_fix

ss.shopping (NUGET):

Affected version(s) >=1.1.5 <=1.1.42

Fix Suggestion:

Update to version no_fix

alimranahmed/larablog (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/codemirror-5.61.0 <dev-dependabot/composer/symfony/http-foundation-7.1.7

Fix Suggestion:

Update to version dev-dependabot/composer/symfony/http-foundation-7.1.7

openclassify/openclassify (PHP):

Affected version(s) =5253.x-dev <5881.x-dev

Fix Suggestion:

Update to version 5881.x-dev

bonnier/wp-bonnier-redirect (PHP):

Affected version(s) >=2.0.0 <2.02

Fix Suggestion:

Update to version 2.02

oceing/backend (PHP):

Affected version(s) =v5.0.2 <v5.0.3

Fix Suggestion:

Update to version v5.0.3

streams/core (PHP):

Affected version(s) =1.1.x-dev <v1.1.0

Fix Suggestion:

Update to version v1.1.0

visiosoft/streams-platform (PHP):

Affected version(s) >=v1.1.250 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

wutongwan/lego (PHP):

Affected version(s) =0.1.21 <0.1.21.dev

Fix Suggestion:

Update to version 0.1.21.dev

streams/core (PHP):

Affected version(s) =v1.6.0 <v1.6.1

Fix Suggestion:

Update to version v1.6.1

wutongwan/lego (PHP):

Affected version(s) >=0.1.28 <0.1.30

Fix Suggestion:

Update to version 0.1.30

openclassify/openclassify (PHP):

Affected version(s) >=dev-dia <dev-docker

Fix Suggestion:

Update to version dev-docker

novosga/novosga (PHP):

Affected version(s) =dev-v2.0.7-fix-reset <v2.0.7

Fix Suggestion:

Update to version v2.0.7

pheye/voyager (PHP):

Affected version(s) =dev-release/v0.11 <v0.11.0

Fix Suggestion:

Update to version v0.11.0

oceing/backend (PHP):

Affected version(s) >=v3.1.7 <v5.0.1

Fix Suggestion:

Update to version v5.0.1

windwalker/phoenix (PHP):

Affected version(s) =dev-dev-repository <dev-master

Fix Suggestion:

Update to version dev-master

tcg/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

openclassify/openclassify (PHP):

Affected version(s) >=dev-fatih-fix <dev-gg-minor-changes

Fix Suggestion:

Update to version dev-gg-minor-changes

openclassify/openclassify (PHP):

Affected version(s) >=dev-temp_dia <dev-vedat

Fix Suggestion:

Update to version dev-vedat

inetstudio/admin-panel (PHP):

Affected version(s) >=v1.4.3 <v1.4.34

Fix Suggestion:

Update to version v1.4.34

inetstudio/admin-panel (PHP):

Affected version(s) >=dev-analysis-z4gVjD <dev-L-5.5

Fix Suggestion:

Update to version dev-L-5.5

eugenec138/cakephp-utils (PHP):

Affected version(s) =dev-checkout-from-6.0

Fix Suggestion:

Update to version no_fix

ibrand/backend (PHP):

Affected version(s) =1.x-dev <v1.0.0

Fix Suggestion:

Update to version v1.0.0

novosga/novosga (PHP):

Affected version(s) >=v2.0.8 <dev-feature/novosga-v2.2

Fix Suggestion:

Update to version dev-feature/novosga-v2.2

wutongwan/lego (PHP):

Affected version(s) >=1.0-beta.2 <dev-1.0-refactor

Fix Suggestion:

Update to version dev-1.0-refactor

pyrocms/accelerant-theme (PHP):

Affected version(s) =dev-feature-tingle <1.0.x-dev

Fix Suggestion:

Update to version 1.0.x-dev

openclassify/openclassify (PHP):

Affected version(s) =dev-image-view-fix <dev-img-carousel

Fix Suggestion:

Update to version dev-img-carousel

erenkucukersoftware/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

eshop_ibrand/backend (PHP):

Affected version(s) =dev-bugfix/wq/COMMERCE-713-bug---merchant-login-issue- <dev-feature/heng/COMMERCE-718-b-the-tutorial-link-seem-be

Fix Suggestion:

Update to version dev-feature/heng/COMMERCE-718-b-the-tutorial-link-seem-be

openclassify/openclassify (PHP):

Affected version(s) =dev-fatihalp4 <dev-laravel-upgrade-10

Fix Suggestion:

Update to version dev-laravel-upgrade-10

yanev/laraadmin (PHP):

Affected version(s) >=dev-master <=2.0.2

Fix Suggestion:

Update to version no_fix

luzucheng59/voyager (PHP):

Affected version(s) >=v0.11.10 <v0.11.12

Fix Suggestion:

Update to version v0.11.12

htmlburger/form-kit (PHP):

Affected version(s) >=v0.1.1 <=v0.1.3

Fix Suggestion:

Update to version no_fix

f24aalam/voyager-material (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

craftcms/vue-asset (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

oceing/backend (PHP):

Affected version(s) >=v1.0.6 <2.x-dev

Fix Suggestion:

Update to version 2.x-dev

luna/tjwiringa-theme (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

windwalker/phoenix (PHP):

Affected version(s) >=1.1.5 <dev-dependabot/npm_and_yarn/minimist-1.2.6

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/minimist-1.2.6

hongyukeji/ebestmall-html (PHP):

Affected version(s) =dev-master <ebestmall-html

Fix Suggestion:

Update to version ebestmall-html

pixney/hjortron-theme (PHP):

Affected version(s) >=1.0.x-dev <1.0.25

Fix Suggestion:

Update to version 1.0.25

openclassify/openclassify (PHP):

Affected version(s) >=dev-pyro3.8 <3.10.x-dev

Fix Suggestion:

Update to version 3.10.x-dev

novosga/novosga (PHP):

Affected version(s) =dev-fix/393_service_max_length <dev-fix/394_deleted_priority

Fix Suggestion:

Update to version dev-fix/394_deleted_priority

inetstudio/admin-panel (PHP):

Affected version(s) =dev-analysis-8ARaRV <dev-analysis-8nWKMG

Fix Suggestion:

Update to version dev-analysis-8nWKMG

azuracast/azuracast (PHP):

Affected version(s) =0.6.0 <0.8.0

Fix Suggestion:

Update to version 0.8.0

guolifu/thunder (PHP):

Affected version(s) >=dev-master <=v2.0.0

Fix Suggestion:

Update to version no_fix

mrpk-dev/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

nadminpanel/adminpanel (PHP):

Affected version(s) >=dev-master <=0.1.0

Fix Suggestion:

Update to version no_fix

ibrand/backend (PHP):

Affected version(s) >=v3.1.0 <v3.2.1

Fix Suggestion:

Update to version v3.2.1

clumsy/utils (PHP):

Affected version(s) =dev-master <0.8.0

Fix Suggestion:

Update to version 0.8.0

oburatongoi/productivity (PHP):

Affected version(s) >=0.1.0 <0.3.26

Fix Suggestion:

Update to version 0.3.26

wutongwan/lego (PHP):

Affected version(s) =0.1.45 <0.2.x-dev

Fix Suggestion:

Update to version 0.2.x-dev

digiwise/digirock (PHP):

Affected version(s) >=dev-master <=v1.5

Fix Suggestion:

Update to version no_fix

bonnier/wp-bonnier-redirect (PHP):

Affected version(s) =dev-IVD <dev-Improve_willow_docker_local_setup

Fix Suggestion:

Update to version dev-Improve_willow_docker_local_setup

oceing/backend (PHP):

Affected version(s) =v3.1.0 <v3.1.1

Fix Suggestion:

Update to version v3.1.1

wutongwan/lego (PHP):

Affected version(s) =0.1.32 <0.1.33

Fix Suggestion:

Update to version 0.1.33

eshop_ibrand/backend (PHP):

Affected version(s) >=dev-develop <v1.0.0

Fix Suggestion:

Update to version v1.0.0

luna/material-theme (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

webreinvent/vaahcms (PHP):

Affected version(s) =dev-feature/release-test <dev-feature/resolve-some-issue

Fix Suggestion:

Update to version dev-feature/resolve-some-issue

leo-unglaub/contao-vuejs (PHP):

Affected version(s) >=dev-master <=0.1.30

Fix Suggestion:

Update to version no_fix

qobo/cakephp-utils (PHP):

Affected version(s) >=dev-cakephp-v38a <=dev-task-19443-add-exclude-fields-during-conversion-for-each-module

Fix Suggestion:

Update to version no_fix

novosga/novosga (PHP):

Affected version(s) >=dev-fix/395_reiniciar_senhas <=dev-fix/401_usuario_id

Fix Suggestion:

Update to version no_fix

streams/core (PHP):

Affected version(s) >=v1.1.250 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

eugenec137/cakephp-utils (PHP):

Affected version(s) >=dev-master <=v1.0.0

Fix Suggestion:

Update to version no_fix

itprism/prism-library (PHP):

Affected version(s) =1.20 <1.21

Fix Suggestion:

Update to version 1.21

openclassify/openclassify (PHP):

Affected version(s) >=1.1 <dev-detached2

Fix Suggestion:

Update to version dev-detached2

trrtly/backend (PHP):

Affected version(s) >=dev-master <=v0.0.1

Fix Suggestion:

Update to version no_fix

shah-newaz/redprint (PHP):

Affected version(s) >=2.0.1 <2.0.5

Fix Suggestion:

Update to version 2.0.5

openclassify/openclassify (PHP):

Affected version(s) =dev-muammertop <dev-muammertop_franch

Fix Suggestion:

Update to version dev-muammertop_franch

sd25/extended-voyager (PHP):

Affected version(s) >=v0.11.10 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

oceing/backend (PHP):

Affected version(s) >=v2.0.2 <v3.0.2

Fix Suggestion:

Update to version v3.0.2

ddphp/webos (PHP):

Affected version(s) >=dev-master <=v1.0.2

Fix Suggestion:

Update to version no_fix

oceing/backend (PHP):

Affected version(s) >=v5.0.4 <dev-laravel-8.x

Fix Suggestion:

Update to version dev-laravel-8.x

pixney/hjortron-theme (PHP):

Affected version(s) >=1.0.26 <1.4.02

Fix Suggestion:

Update to version 1.4.02

openclassify/openclassify (PHP):

Affected version(s) =dev-vedatak <dev-vedatakd

Fix Suggestion:

Update to version dev-vedatakd

eshop_ibrand/backend (PHP):

Affected version(s) >=dev-bugfix/tracy/COMMERCE-497-b-backend-panel-translation <dev-feature/heng/COMMERCE-648-b-sendbird-notification-cou

Fix Suggestion:

Update to version dev-feature/heng/COMMERCE-648-b-sendbird-notification-cou

pheye/voyager (PHP):

Affected version(s) >=dev-develop <v0.9.1

Fix Suggestion:

Update to version v0.9.1

novosga/novosga (PHP):

Affected version(s) >=dev-fix/rename_mercure_var <v0.5.1

Fix Suggestion:

Update to version v0.5.1

streams/core (PHP):

Affected version(s) >=v1.2.138 <v1.4.132

Fix Suggestion:

Update to version v1.4.132

shah-newaz/redprint (PHP):

Affected version(s) >=v0.2.0-beta <2.0.0

Fix Suggestion:

Update to version 2.0.0

inetstudio/admin-panel (PHP):

Affected version(s) =v1.5.66 <v1.5.67

Fix Suggestion:

Update to version v1.5.67

openclassify/openclassify (PHP):

Affected version(s) >=0.9 <dev-emrullahardc-patch-1

Fix Suggestion:

Update to version dev-emrullahardc-patch-1

openclassify/openclassify (PHP):

Affected version(s) >=2.0.1 <2.0.30

Fix Suggestion:

Update to version 2.0.30

oceing/backend (PHP):

Affected version(s) =v1.0.3 <v1.0.4

Fix Suggestion:

Update to version v1.0.4

oceing/backend (PHP):

Affected version(s) =v3.1.2 <v3.1.3

Fix Suggestion:

Update to version v3.1.3

ninjacn/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

timtoday/voyager-cn (PHP):

Affected version(s) >=dev-master <=1.0.4.3

Fix Suggestion:

Update to version no_fix

wutongwan/lego (PHP):

Affected version(s) >=0.3.1-beta.15 <1.0-beta.10

Fix Suggestion:

Update to version 1.0-beta.10

eugenec138/cakephp-utils (PHP):

Affected version(s) >=dev-master <v1.0.3

Fix Suggestion:

Update to version v1.0.3

hamzz/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

bonnier/wp-bonnier-redirect (PHP):

Affected version(s) =1.0.0 <v1.0.0

Fix Suggestion:

Update to version v1.0.0

alimranahmed/larablog (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/lodash-4.17.21 <dev-dependabot/npm_and_yarn/rollup-4.22.4

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/rollup-4.22.4

luzucheng59/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

fiedsch/ligaverwaltung-bundle (PHP):

Affected version(s) >=0.0.1 <0.3.0

Fix Suggestion:

Update to version 0.3.0

openclassify/openclassify (PHP):

Affected version(s) >=dev-metehancelik-patch-1 <dev-serdarekremcakir-patch-1

Fix Suggestion:

Update to version dev-serdarekremcakir-patch-1

joomlatools/framework (PHP):

Affected version(s) >=v3.4.0 <v3.4.3

Fix Suggestion:

Update to version v3.4.3

xiaokus/voyager (PHP):

Affected version(s) =dev-master <ls

Fix Suggestion:

Update to version ls

zijinghua-dev/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

wutongwan/lego (PHP):

Affected version(s) >=0.2.15 <0.3.x-dev

Fix Suggestion:

Update to version 0.3.x-dev

wpzoom/social-icons-widget (PHP):

Affected version(s) =4.1.3 <4.2.0

Fix Suggestion:

Update to version 4.2.0

openclassify/openclassify (PHP):

Affected version(s) =dev-postsmodulefix <dev-queued-reset-password-email-link-issue

Fix Suggestion:

Update to version dev-queued-reset-password-email-link-issue

qobo/cakephp-utils (PHP):

Affected version(s) =dev-adding-limits-property <dev-allow-required-false-unique-true

Fix Suggestion:

Update to version dev-allow-required-false-unique-true

wizclumsy/utils (PHP):

Affected version(s) =dev-master <0.8.0

Fix Suggestion:

Update to version 0.8.0

oceing/backend (PHP):

Affected version(s) =v3.1.5 <v3.1.6

Fix Suggestion:

Update to version v3.1.6

qobo/cakephp-utils (PHP):

Affected version(s) >=v6.5.3 <v10.3.4

Fix Suggestion:

Update to version v10.3.4

chabibnr/ayom (PHP):

Affected version(s) >=dev-master <2.x-dev

Fix Suggestion:

Update to version 2.x-dev

purepanel/streams-platform (PHP):

Affected version(s) >=v1.2.138 <v1.6.1

Fix Suggestion:

Update to version v1.6.1

pixney/fiske-theme (PHP):

Affected version(s) >=dev-development <v0.0.1-alpha

Fix Suggestion:

Update to version v0.0.1-alpha

qsnh/meedu (PHP):

Affected version(s) =v1.0 <dev-dependabot/npm_and_yarn/path-parse-1.0.7

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/path-parse-1.0.7

anomaly/streams-platform (PHP):

Affected version(s) =1.1.x-dev <v1.1.0

Fix Suggestion:

Update to version v1.1.0

doode/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

nerio93/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

dwij/laraadmin (PHP):

Affected version(s) =dev-Unit-Testing-1 <1.0.1

Fix Suggestion:

Update to version 1.0.1

php300/framework (PHP):

Affected version(s) =2.0.0 <2.0

Fix Suggestion:

Update to version 2.0

shjarah/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

romjkeeeen/fix-cms-core1 (PHP):

Affected version(s) >=dev-dev-master <=dev-php8-dev-master

Fix Suggestion:

Update to version no_fix

openclassify/openclassify (PHP):

Affected version(s) =2699.x-dev <4798.x-dev

Fix Suggestion:

Update to version 4798.x-dev

ahmadsyamim/voyager (PHP):

Affected version(s) =v0.11.14 <1.0.x-dev

Fix Suggestion:

Update to version 1.0.x-dev

mrcore/bootswatch-theme (PHP):

Affected version(s) >=dev-develop <dev-vue

Fix Suggestion:

Update to version dev-vue

webreinvent/vaahcms (PHP):

Affected version(s) =dev-feature/config-fixes <dev-feature/database-export-and-import

Fix Suggestion:

Update to version dev-feature/database-export-and-import

3xw/cakephp-app (PHP):

Affected version(s) >=0.0.1 <3.7.0.0

Fix Suggestion:

Update to version 3.7.0.0

openclassify/openclassify (PHP):

Affected version(s) =dev-sametyeni <dev-sezer

Fix Suggestion:

Update to version dev-sezer

php300/framework (PHP):

Affected version(s) =2.1.1 <2.2.0

Fix Suggestion:

Update to version 2.2.0

pixney/hjortron-theme (PHP):

Affected version(s) >=v1.4.03 <=1.4.05

Fix Suggestion:

Update to version no_fix

bonnier/wp-bonnier-redirect (PHP):

Affected version(s) >=1.0.1 <dev-dependabot/composer/rmccue/requests-1.8.0

Fix Suggestion:

Update to version dev-dependabot/composer/rmccue/requests-1.8.0

emohamed/form-kit (PHP):

Affected version(s) =dev-master <v0.1.0

Fix Suggestion:

Update to version v0.1.0

typerocket/laravel (PHP):

Affected version(s) >=v2.1.4 <v2.2.2

Fix Suggestion:

Update to version v2.2.2

yangtaihua/streams-platform (PHP):

Affected version(s) >=v1.1.250 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

phambinh/phambinhcms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

wutongwan/lego (PHP):

Affected version(s) >=0.1.37 <0.1.44

Fix Suggestion:

Update to version 0.1.44

openclassify/openclassify (PHP):

Affected version(s) =dev-4.0-moradi <dev-4.0-mostafa

Fix Suggestion:

Update to version dev-4.0-mostafa

oceing/backend (PHP):

Affected version(s) >=dev-bai_jia_an <dev-saas

Fix Suggestion:

Update to version dev-saas

anomaly/streams-platform (PHP):

Affected version(s) >=v1.1.250 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

joomlatools/framework (PHP):

Affected version(s) =dev-feature/130-attachments <dev-feature/274-finder

Fix Suggestion:

Update to version dev-feature/274-finder

larashuo/laracrud (PHP):

Affected version(s) >=v1.0.1 <=v1.0.2

Fix Suggestion:

Update to version no_fix

dariob/cakephp-utils (PHP):

Affected version(s) =dev-dependabot/composer/rlanvin/php-rrule-tw-2.2 <v2.2.0

Fix Suggestion:

Update to version v2.2.0

zzhh9857/voyager (PHP):

Affected version(s) >=v0.11.10 <v0.11.12

Fix Suggestion:

Update to version v0.11.12

openclassify/openclassify (PHP):

Affected version(s) >=dev-l10n_master27 <dev-l10n_master32

Fix Suggestion:

Update to version dev-l10n_master32

artworx/omegacp (PHP):

Affected version(s) >=dev-master <=1.0.0

Fix Suggestion:

Update to version no_fix

sky9th/skycms (PHP):

Affected version(s) >=dev-dev <v2.1

Fix Suggestion:

Update to version v2.1

joomlatools/framework (PHP):

Affected version(s) =dev-feature/277-http2 <dev-feature/277-range

Fix Suggestion:

Update to version dev-feature/277-range

openclassify/openclassify (PHP):

Affected version(s) =dev-navigation <dev-newcurrency

Fix Suggestion:

Update to version dev-newcurrency

windwalker/phoenix (PHP):

Affected version(s) >=1.3.8 <1.4

Fix Suggestion:

Update to version 1.4

tobyokeke/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

wutongwan/lego (PHP):

Affected version(s) >=0.2.6 <0.2.14

Fix Suggestion:

Update to version 0.2.14

wutongwan/lego (PHP):

Affected version(s) >=0.2.1 <dev-dependabot/npm_and_yarn/decode-uri-component-0.2.2

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/decode-uri-component-0.2.2

gabrieltakacs/voyager (PHP):

Affected version(s) =dev-use-user-model <v0.9.1

Fix Suggestion:

Update to version v0.9.1

3xw/cakephp-app (PHP):

Affected version(s) =3.7.x-dev <3.7.0.1

Fix Suggestion:

Update to version 3.7.0.1

typerocket/laravel (PHP):

Affected version(s) >=v2.0.0-RC1 <v2.1.3

Fix Suggestion:

Update to version v2.1.3

newicon/neon (PHP):

Affected version(s) =dev-circleci-project-setup <dev-develop

Fix Suggestion:

Update to version dev-develop

joomlatools/framework (PHP):

Affected version(s) >=v3.1.0-rc.1 <3.4.x-dev

Fix Suggestion:

Update to version 3.4.x-dev

mrcore/bootswatch-theme (PHP):

Affected version(s) =5.8.x-dev <5.8.1

Fix Suggestion:

Update to version 5.8.1

pyrocms/accelerant-theme (PHP):

Affected version(s) =dev-feature-bootstrap4

Fix Suggestion:

Update to version no_fix

anomaly/streams-platform (PHP):

Affected version(s) =v1.6.0 <v1.6.1

Fix Suggestion:

Update to version v1.6.1

colee/yii2-vue (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/assets/vue/lodash.defaultsdeep-4.6.1 <1.0.3

Fix Suggestion:

Update to version 1.0.3

qobo/cakephp-utils (PHP):

Affected version(s) =dev-dependabot/composer/burzum/cakephp-imagine-plugin-tw-3.0 <v3.0.0

Fix Suggestion:

Update to version v3.0.0

semisalov/fix-cms-core (PHP):

Affected version(s) >=dev-dev-master <=dev-php8-dev-master

Fix Suggestion:

Update to version no_fix

openclassify/openclassify (PHP):

Affected version(s) >=dev-m_alibaba <dev-master

Fix Suggestion:

Update to version dev-master

openclassify/openclassify (PHP):

Affected version(s) =dev-l10n_master37 <dev-l10n_master38

Fix Suggestion:

Update to version dev-l10n_master38

openclassify/openclassify (PHP):

Affected version(s) >=dev-vedatfix <dev-vue-compile

Fix Suggestion:

Update to version dev-vue-compile

bonnier/wp-bonnier-redirect (PHP):

Affected version(s) =dev-legacy <dev-master

Fix Suggestion:

Update to version dev-master

wutongwan/lego (PHP):

Affected version(s) >=0.1.23 <0.1.27

Fix Suggestion:

Update to version 0.1.27

typerocket/laravel (PHP):

Affected version(s) >=v2.2.3 <=v2.2.7

Fix Suggestion:

Update to version no_fix

alimranahmed/larablog (PHP):

Affected version(s) >=4.0.0 <4.1.0

Fix Suggestion:

Update to version 4.1.0

wenkechen/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

smohe1991/persian-voyager (PHP):

Affected version(s) =dev-master <dev-testing/test-mulitple-database-drivers

Fix Suggestion:

Update to version dev-testing/test-mulitple-database-drivers

novosga/novosga (PHP):

Affected version(s) =2.0.0-RC1 <v2.0.0-RC1

Fix Suggestion:

Update to version v2.0.0-RC1

qsnh/meedu (PHP):

Affected version(s) >=v1.1 <dev-dependabot/composer/league/flysystem-1.1.4

Fix Suggestion:

Update to version dev-dependabot/composer/league/flysystem-1.1.4

voyager-admin/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

alimranahmed/larablog (PHP):

Affected version(s) =dev-develop <dev-main

Fix Suggestion:

Update to version dev-main

xtoyun/xtophp (PHP):

Affected version(s) >=dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

pixney/fiske-theme (PHP):

Affected version(s) =1.0.x-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

littlerobinson/query-builder-bundle (PHP):

Affected version(s) =dev-master <v1.0

Fix Suggestion:

Update to version v1.0

alimranahmed/larablog (PHP):

Affected version(s) =dev-dependabot/composer/symfony/http-kernel-5.4.2 <dev-dependabot/npm_and_yarn/vite-5.4.6

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/vite-5.4.6

wutongwan/lego (PHP):

Affected version(s) >=0.1.34 <0.1.36

Fix Suggestion:

Update to version 0.1.36

visiosoft/streams-platform (PHP):

Affected version(s) >=v1.2.138 <v1.6.1

Fix Suggestion:

Update to version v1.6.1

misma/laravel-mailpeek (PHP):

Affected version(s) >=dev-master <=2.0.x-dev

Fix Suggestion:

Update to version no_fix

yangtaihua/streams-platform (PHP):

Affected version(s) >=v1.2.138 <v1.6.1

Fix Suggestion:

Update to version v1.6.1

quetzalarc/admin-gallery (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

novosga/novosga (PHP):

Affected version(s) =dev-dependabot/composer/symfony/cache-4.3.11 <dev-dependabot/composer/symfony/serializer-4.4.35

Fix Suggestion:

Update to version dev-dependabot/composer/symfony/serializer-4.4.35

windwalker/phoenix (PHP):

Affected version(s) >=1.2.7 <dev-dependabot/npm_and_yarn/ini-1.3.7

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/ini-1.3.7

visiosoft/base-theme (PHP):

Affected version(s) >=dev-add-maskedInput <=5296.x-dev

Fix Suggestion:

Update to version no_fix

zijinhua/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

openclassify/openclassify (PHP):

Affected version(s) =dev-minor-changes <dev-moradi

Fix Suggestion:

Update to version dev-moradi

wutongwan/lego (PHP):

Affected version(s) >=0.2.3 <0.2.5

Fix Suggestion:

Update to version 0.2.5

codebois/qrcodeslibrary (PHP):

Affected version(s) >=dev-element-history <v1.0.0

Fix Suggestion:

Update to version v1.0.0

newicon/neon (PHP):

Affected version(s) =v0.9.0 <v1.0.0

Fix Suggestion:

Update to version v1.0.0

openclassify/openclassify (PHP):

Affected version(s) >=4816.x-dev <4857.x-dev

Fix Suggestion:

Update to version 4857.x-dev

openclassify/openclassify (PHP):

Affected version(s) =dev-fatihalp3 <dev-fatihalp-patch-3

Fix Suggestion:

Update to version dev-fatihalp-patch-3

qobo/cakephp-utils (PHP):

Affected version(s) =dev-dependabot/add-v2-config-file <v2.0.0

Fix Suggestion:

Update to version v2.0.0

novosga/novosga (PHP):

Affected version(s) =v3.0.x-dev <dev-dependabot/composer/twig/twig-3.14.0

Fix Suggestion:

Update to version dev-dependabot/composer/twig/twig-3.14.0

donglf681/backend (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

nooku/nooku-framework (PHP):

Affected version(s) >=dev-feature/202-json-override <dev-feature/244-assets

Fix Suggestion:

Update to version dev-feature/244-assets

larashuo/laracrud (PHP):

Affected version(s) =dev-master <v1.0.0

Fix Suggestion:

Update to version v1.0.0

openclassify/openclassify (PHP):

Affected version(s) =dev-newemlak24 <dev-revert-1341-srdr-curr

Fix Suggestion:

Update to version dev-revert-1341-srdr-curr

typerocket/laravel (PHP):

Affected version(s) =dev-master <v1.0.0-beta

Fix Suggestion:

Update to version v1.0.0-beta

cbidigital/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

oceing/backend (PHP):

Affected version(s) =v1.0.1 <v1.0.2

Fix Suggestion:

Update to version v1.0.2

novosga/novosga (PHP):

Affected version(s) =v2.0.x-dev <v2.0.1

Fix Suggestion:

Update to version v2.0.1

htmlburger/form-kit (PHP):

Affected version(s) =dev-master <v0.1.0

Fix Suggestion:

Update to version v0.1.0

mblanch/inventory (PHP):

Affected version(s) =dev-analysis-8bRxMl

Fix Suggestion:

Update to version no_fix

lisandrop05/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

hebrahimzadeh/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

mrcore/bootswatch-theme (PHP):

Affected version(s) >=2.0.x-dev <2.0.10

Fix Suggestion:

Update to version 2.0.10

gabootsoft/gaboot (PHP):

Affected version(s) >=v0.1.4 <v0.2.4

Fix Suggestion:

Update to version v0.2.4

nooku/nooku-framework (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/bootstrap-sass-3.4.1 <dev-feature/70-buffer

Fix Suggestion:

Update to version dev-feature/70-buffer

mblanch/inventory (PHP):

Affected version(s) >=dev-analysis-zDbBlg <dev-analysis-X0bldx

Fix Suggestion:

Update to version dev-analysis-X0bldx

colee/yii2-vue (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/assets/vue/karma-6.3.16 <=dev-dependabot/npm_and_yarn/assets/vue/y18n-3.2.2

Fix Suggestion:

Update to version no_fix

notexpired/neapi (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

xtoyun/xtophp (PHP):

Affected version(s) =dev-dependabot/composer/topthink/framework-5.1.42

Fix Suggestion:

Update to version no_fix

ericvvc9/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

alimranahmed/larablog (PHP):

Affected version(s) >=dev-dependabot/composer/laravel/framework-8.22.1 <dev-dependabot/composer/laravel/framework-8.75.0

Fix Suggestion:

Update to version dev-dependabot/composer/laravel/framework-8.75.0

dfz/dola (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

kayrules/solatjakim-api-site (PHP):

Affected version(s) =dev-master <dev-version-1.0

Fix Suggestion:

Update to version dev-version-1.0

inhere/gearman (PHP):

Affected version(s) >=dev-dev <=v1.0.0

Fix Suggestion:

Update to version no_fix

qobo/cakephp-utils (PHP):

Affected version(s) =dev-dependabot/composer/rlanvin/php-rrule-tw-2.2 <v2.2.0

Fix Suggestion:

Update to version v2.2.0

qobo/cakephp-utils (PHP):

Affected version(s) >=v13.0.1 <v13.3.4

Fix Suggestion:

Update to version v13.3.4

moxyrus/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

wpzoom/social-icons-widget (PHP):

Affected version(s) >=4.2.5 <dev-wp58-fixes

Fix Suggestion:

Update to version dev-wp58-fixes

ibrand/backend (PHP):

Affected version(s) >=dev-bai_jia_an <v.1.02

Fix Suggestion:

Update to version v.1.02

foridom/backend (PHP):

Affected version(s) >=dev-baiyi <dev-master

Fix Suggestion:

Update to version dev-master

newicon/neon (PHP):

Affected version(s) =dev-master <dev-neilc-listObject-docblock

Fix Suggestion:

Update to version dev-neilc-listObject-docblock

devuniverse/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

chatfeed/yii2-vue-admin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

mrcore/bootswatch-theme (PHP):

Affected version(s) >=5.8.2 <=5.8.3

Fix Suggestion:

Update to version no_fix

novosga/novosga (PHP):

Affected version(s) =v2.2.x-dev <dev-dependabot/composer/twig/twig-2.14.11

Fix Suggestion:

Update to version dev-dependabot/composer/twig/twig-2.14.11

devig/voyager (PHP):

Affected version(s) >=v0.11.0 <v1.0.0

Fix Suggestion:

Update to version v1.0.0

qsnh/meedu (PHP):

Affected version(s) =v1.1.4 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

jianyan74/rageframe (PHP):

Affected version(s) >=dev-master <=1.1.0

Fix Suggestion:

Update to version no_fix

mrcore/bootswatch-theme (PHP):

Affected version(s) >=5.3.0 <5.8.0

Fix Suggestion:

Update to version 5.8.0

pro-cms/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

ilhanet/erpnet-widget-resource (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

emohamed/form-kit (PHP):

Affected version(s) >=v0.1.1 <=v0.1.3

Fix Suggestion:

Update to version no_fix

alimranahmed/larablog (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/y18n-3.2.2 <dev-174-upgrade-to-Laravel-11

Fix Suggestion:

Update to version dev-174-upgrade-to-Laravel-11

doitonlinemedia/admin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

littlerobinson/querybuilder-php (PHP):

Affected version(s) >=dev-master <=v1.0.5

Fix Suggestion:

Update to version no_fix

openclassify/openclassify (PHP):

Affected version(s) >=dev-l10n_master33 <dev-l10n_master36

Fix Suggestion:

Update to version dev-l10n_master36

openclassify/openclassify (PHP):

Affected version(s) >=dev-remove-sentry-settings <dev-samettrans

Fix Suggestion:

Update to version dev-samettrans

inetstudio/admin-panel (PHP):

Affected version(s) >=v1.4.35 <v1.5.65

Fix Suggestion:

Update to version v1.5.65

mblanch/inventory (PHP):

Affected version(s) =dev-analysis-zR0wRY <dev-analysis-zE2xJG

Fix Suggestion:

Update to version dev-analysis-zE2xJG

purepanel/streams-platform (PHP):

Affected version(s) >=v1.1.250 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

gabrieltakacs/voyager (PHP):

Affected version(s) =dev-master <dev-testing/test-mulitple-database-drivers

Fix Suggestion:

Update to version dev-testing/test-mulitple-database-drivers

bonnier/wp-bonnier-redirect (PHP):

Affected version(s) >=2.02 <4.0.0

Fix Suggestion:

Update to version 4.0.0

itplato/phpanalysis (PHP):

Affected version(s) =dev-master <v3.0_release

Fix Suggestion:

Update to version v3.0_release

anomaly/streams-platform (PHP):

Affected version(s) >=v1.2.138 <1.6.x-dev

Fix Suggestion:

Update to version 1.6.x-dev

whb/wxyzadmin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

anhnn78/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

smohe1991/persian-voyager (PHP):

Affected version(s) =dev-issue/fix-946

Fix Suggestion:

Update to version no_fix

wpzoom/social-icons-widget (PHP):

Affected version(s) >=4.2.1 <4.2.3

Fix Suggestion:

Update to version 4.2.3

oburatongoi/productivity (PHP):

Affected version(s) >=0.0.9 <0.0.13

Fix Suggestion:

Update to version 0.0.13

griffyn/voyager (PHP):

Affected version(s) =v0.11.14 <1.x-dev

Fix Suggestion:

Update to version 1.x-dev

openclassify/openclassify (PHP):

Affected version(s) =dev-l10n_master39 <dev-l10n_master40

Fix Suggestion:

Update to version dev-l10n_master40

dariob/cakephp-utils (PHP):

Affected version(s) =dev-dependabot/composer/cakephp/cakephp-tw-3.8.9 <v4.0.0

Fix Suggestion:

Update to version v4.0.0

openclassify/openclassify (PHP):

Affected version(s) =dev-vedatakdn <dev-vedatakdogan

Fix Suggestion:

Update to version dev-vedatakdogan

3xw/cakephp-app (PHP):

Affected version(s) >=3.7.1.9 <4.1.0

Fix Suggestion:

Update to version 4.1.0

alimranahmed/larablog (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/hosted-git-info-2.8.9 <dev-dependabot/npm_and_yarn/braces-3.0.3

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/braces-3.0.3

idci/extra-form-bundle (PHP):

Affected version(s) >=v2.0.0 <v2.0.5

Fix Suggestion:

Update to version v2.0.5

zzhh9857/voyager (PHP):

Affected version(s) =v0.11.14 <1.0.x-dev

Fix Suggestion:

Update to version 1.0.x-dev

smohe1991/persian-voyager (PHP):

Affected version(s) >=dev-add-postgres-geometry <dev-loginStylesAndPrimaryColor

Fix Suggestion:

Update to version dev-loginStylesAndPrimaryColor

ibrand/backend (PHP):

Affected version(s) >=v1.0.1 <v2.0.0

Fix Suggestion:

Update to version v2.0.0

Related Resources (2)

https://github.com/RetireJS/retire.js/commit/650167fe315b6b0f05f1e770dd0b4e6829a36cfb

https://github.com/vuejs/vue/commit/5091e2c9847601e329ac36d17eae90bb5cb77a91

Do you need more information?

CVSS v4

Base Score:

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

PASSIVE

Vulnerable System Confidentiality

LOW

Vulnerable System Integrity

LOW

Vulnerable System Availability

NONE

Subsequent System Confidentiality

LOW

Subsequent System Integrity

LOW

Subsequent System Availability

NONE

CVSS v3

Base Score:

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE