Repository navigation
vue-template-compiler XSS vulnerability #1666
Description
Hey @thomashohn, I ran npm audit fix as you said and saw that vue-template-compiler has a moderate XSS vulnerability which is used by documentation.
npm audit fix --force could fix it by upgrading documentation to 6.2.0, but that’s a breaking change, so not sure if it’s safe to do automatically.
Just wanted to bring it up so it can be checked.
Activity
Peter-Robert123 commentedon Feb 12, 2026
hey can i solve this issue?
tmcw commentedon Feb 12, 2026
I'm happy to merge a PR if someone submits them. We should note that this is not actually a vulnerability that is exploitable in any way in this application, so it's really just a false alarm.
Remove optional transitive dep on vue-template-compiler (#3089)