Frontend framework
Vue: supported versions and open vulnerabilities today
Vue 3.5 is supported; 3.4 reached end of life on Sep 3, 2024; the latest release is 3.5.44. No advisories for Vue were published in the last 12 months; none of its advisories is on CISA’s list of exploited vulnerabilities.
Last checked against endoflife.date, npm, OSV.dev, CISA KEV and deps.dev.
- Latest release
- 3.5.44
- npm downloads last week
- 17.6M
- GitHub stars
- 54.7k
- Licence
- MIT
- OpenSSF Scorecard
- 6.3 / 10
Supported versions
Security advisories
No advisories published in the last 12 months. 1 in total since records began. Checked packages: vue.
Maintenance and supply chain
OpenSSF Scorecard 6.3 / 10 (scored )
The Scorecard rates the repository’s security practices, not known vulnerabilities. Recent activity: 30 commits and 16 issue updates found in the last 90 days.
Weakest checks
- Over-privileged CI tokens (Token-Permissions 0/10)
- No static analysis (SAST 0/10)
- No fuzzing (Fuzzing 0/10)
Docs and release notes
Check Vue in your own stack
This page checks Vue in general. Your repo pins specific versions: the free dependency check reads your manifests and lists what to fix first. Prism Agent runs the same live checks on your whole stack and turns them into a plan your coding agent can build.