CVE Daily – Vuetify (High+Critical) https://cvedaily.com/pages/tags/vuetify.html CVE Daily – Vuetify (High+Critical) en Wed, 03 Jun 2026 21:27:03 +0000 [High] CVE-2025-8083 – The Preset configuration https://v2.vuetifyjs.com/en/features/presets  feature ... https://nvd.nist.gov/vuln/detail/CVE-2025-8083 https://nvd.nist.gov/vuln/detail/CVE-2025-8083 Fri, 12 Dec 2025 20:15:43 +0000 High CVE-2025-8083

The Preset configuration https://v2.vuetifyjs.com/en/features/presets  feature of Vuetify is vulnerable to Prototype Pollution https://cheatsheetseries.owasp.org/cheatsheets/Prototype_Pollution_Prevention_Cheat_Sheet.html  due to the internal 'mergeDeep' utility function used to merge options with defaults. Using a specially-crafted, malicious preset can result in polluting all JavaScript objec…

CVSS: 8.6 · CWE: CWE-1321

View on NVD

]]>