GHSA-9w3x-85mw-4fwm
Medium · 6.3CVSS
6.3
EPSS
—
Published
Dec 12, 2025
CISA due date
—
The record
Vuetify has a Cross-site Scripting (XSS) vulnerability in the VDatePicker component
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | vuetify | 2.0.0 | 3.0.0 |
Related vulnerabilities
- CVE-2025-8082 Improper neutralization of the title date in the 'VDatePicker' component in Vuetify… Same vulnerability
- GHSA-3jp5-5f8r-q2wg Vuetify has a Prototype Pollution vulnerability Also affects vuetify
- CVE-2025-8083 The Preset configuration https://v2.vuetifyjs.com/en/features/presets feature of Vuetify… Also affects vuetify
- CVE-2026-96379 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96382 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96368 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96361 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96362 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79