element-plus vulnerabilities (npm)

2 vulnerabilities.

• element-plus npm Element Plus Link component (el-link) implements insufficient input validation for the href attribute CVE-2025-57665 6.4 MediumSeptember 9, 2025
• element-plus npm element-plus vulnerable to cross-site scripting (XSS) via el-table-column CVE-2022-27103 Fix available 6.1 MediumApril 25, 2022