cve/2024/CVE-2024-9506.md

### [CVE-2024-9506](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9506)
![](https://img.shields.io/static/v1?label=Product&message=vue&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2.0.0%3C%3D%202.7.16%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-1333%20Inefficient%20Regular%20Expression%20Complexity&color=brighgreen)

### Description

Improper regular expression in Vue's parseHTML function leads to a potential regular expression denial of service vulnerability.

### POC

#### Reference
- https://www.herodevs.com/vulnerability-directory/cve-2024-9506

#### Github
- https://github.com/bio/vue-template-compiler-patched
- https://github.com/cfires/vue
- https://github.com/lastboy/vue2