Adds vue.js vulns

RetireJS · Aug 7, 2018 · 650167f · 650167f
1 parent 2f6dd20
commit 650167f
Show file tree

Hide file tree

Showing 2 changed files with 57 additions and 0 deletions.
diff --git a/repository/jsrepository.json b/repository/jsrepository.json
@@ -1223,6 +1223,41 @@
 		}
 	},
 
+
+	"vue" : {
+		"vulnerabilities" : [
+			{
+				"below" : "2.5.17",
+				"severity" : "medium",
+				"identifiers" : {
+					"summary" : "potential xss in ssr when using v-bind"
+				},
+				"info" : [ "https://github.com/vuejs/vue/releases/tag/v2.5.17" ]
+			},
+			{
+				"below" : "2.4.3",
+				"severity" : "medium",
+				"identifiers" : {
+					"summary" : "possible xss vector "
+				},
+				"info" : [ "https://github.com/vuejs/vue/releases/tag/v2.4.3" ]
+			}
+		],
+		"extractors" : {
+			"uri"			: [
+				"/vue@(§§version§§)/dist/vue\\.js"
+			],
+			"filename"		: [ "vue-(§§version§§)(\\.min)?\\.js" ],
+			"filecontent"	: [
+				"/\\*!\\n * Vue.js v(§§version§§)",
+				"Vue.version = '(§§version§§)';",
+				"'(§§version§§)'[^\\n]{0,8000}Vue compiler"
+			],
+			"func"			: [ "Vue.version" ]
+		}
+	},
+
+
 	"dont check" : {
 		"extractors" : {
 			"uri" : [

diff --git a/repository/npmrepository.json b/repository/npmrepository.json
@@ -912,6 +912,28 @@
 		]
 	},
 
+	"vue" : {
+		"vulnerabilities" : [
+			{
+				"below" : "2.5.17",
+				"severity" : "medium",
+				"identifiers" : {
+					"summary" : "potential xss in ssr when using v-bind"
+				},
+				"info" : [ "https://github.com/vuejs/vue/releases/tag/v2.5.17" ]
+			},
+			{
+				"below" : "2.4.3",
+				"severity" : "medium",
+				"identifiers" : {
+					"summary" : "possible xss vector "
+				},
+				"info" : [ "https://github.com/vuejs/vue/releases/tag/v2.4.3" ]
+			}
+		]
+	},
+
+
 	"react-dom": {
 		"vulnerabilities" : [
 			{