Vision-ui vulnerabilities

2 known vulnerabilities in Vision-ui from DavidOsipov. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Vision-ui: Uncontrolled Resource Consumption

  CVE-2025-54884Aug 6, 2025DavidOsipov

  Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the generateSecureId and getSecureRandomInt functions in security-kit versions prior to 3.5.0 (packaged in Vision UI 1.4.0 and below) a

• 9.3 Critical severity

  Vision-ui: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2025-54883Aug 6, 2025DavidOsipov

  Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the getSecureRandomInt function in security-kit versions prior to 3.5.0 (packaged in Vision-ui <= 1.4.0) contains a critical cryptograp