vue-patched

Patched Vue 2.7.16 to fix XSS (CVE-2024-6783) and ReDoS (CVE-2024-9506) security vulnerabilities.
2,189 1
vue
Install
npm install vue-patched
Latest Version:2.7.16-patch.3
License:MIT
Last Updated:Aug 5, 2026
Links: GitHub  ·  npm
Maintainer: bio

vue-patched

A security-patched version of Vue 2.7.16 to fix the prototype pollution XSS vulnerability (CVE-2024-6783) and the ReDoS vulnerability (CVE-2024-9506).

Vue 2 is end-of-life and no longer receives official security updates. This package provides patched runtime and full (compiler-included) builds.

Based on vuejs/vue@v2.7.16. Prefer migrating to Vue 3 when you can.

Installation

Installs under the original vue name so import Vue from 'vue' / require('vue') and peer dependencies keep working.

npm
npm install vue@npm:vue-patched@2.7.16-patch.3
pnpm
pnpm add vue@npm:vue-patched@2.7.16-patch.3
Yarn
yarn add vue@npm:vue-patched@2.7.16-patch.3

Related

If you compile .vue SFCs or templates at build time (vue-loader, etc.), also replace vue-template-compiler with vue-template-compiler-patched.

CDN / full build

<script src="https://unpkg.com/vue-patched@2.7.16-patch.3/dist/vue.js"></script>

<script src="https://cdn.jsdelivr.net/npm/vue-patched@2.7.16-patch.3/dist/vue.js"></script>

License

MIT

Copyright (c) 2013-present, Yuxi (Evan) You

Related Packages

vue

The progressive JavaScript framework for building modern web UI.

588,019,132 54,801
vue
@vueuse/shared
372,738,348 22,398
vue utils vue-use
@vueuse/core

Collection of essential Vue Composition Utilities

367,188,523 22,398
vue utils vue-use
@vitejs/plugin-vue

The official plugin for Vue SFC support in Vite.

333,357,380 686
vue vite vite-plugin
eslint-plugin-vue

Official ESLint plugin for Vue.js

266,364,830 4,591
vue eslint eslint-config eslint-plugin rules vuejs

Version History

Version Released License
2.7.16-patch.3 MIT
2.7.16-patch.2 MIT
2.7.16-patch.1 MIT