CVE-2024-9506

A flaw was found in Vue.js. Within the parseHTML() function of html-parser.ts, there is a regular expression (regex) to check for proper closing tags for HTML. However, due to an improperly written regex, when you pass a script containing long text, it will trigger a regular expression denial of service (ReDoS) attack, which can cause the process to slow down significantly and render the application unavailable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.