Security support for end-of-life Vue 2
Vue 2 reached end of life on 31 December 2023, and 2.7.16 is its last release. These are the versions found most often, with every vulnerability the US National Vulnerability Database lists for them.
Request a server assessmentVue 2 versions
| Vue | Notes | End of life | Known CVEs | Critical | Exploited | Forkward |
|---|---|---|---|---|---|---|
| 2.6.14 | 31 December 2023 | 1 | 0 | 0 | Patch on order, 48 h | |
| 2.7.16 | Last Vue 2 release | 31 December 2023 | 1 | 0 | 0 | Patch on order, 48 h |
Vulnerabilities from the OSV open-source vulnerability database, 28 October 2026, for the upstream version, counting only entries where Vue itself is the vulnerable product. Exploited: listed in the CISA catalogue of known exploited vulnerabilities. Your assessment shows which of them are real on your systems.
JavaScript libraries
Old jQuery, AngularJS and Vue 2: the versions security scans still find, and what affects them. All JavaScript libraries
Patch on order, 48 h
We backport the fix to the version you run within 48 hours of your order, or within 24 hours with priority delivery. See the plans