Vue

Endless Lifecycle Support (ELS) for Vue from TuxCare provides security fixes for Vue versions that have reached end of life. With ELS, you can continue running Vue applications without vulnerability concerns, even after official support has ended.

Supported Versions

Package	Version
vue	2.2.6, 2.6.11, 2.6.14, 2.7.16
@vue/server-renderer	2.2.6, 2.6.11, 2.6.14, 2.7.16
vue-template-compiler	2.2.6, 2.6.11, 2.6.14, 2.7.16

Installation

Docker compatible

Have a SecureChain token?

Follow the SecureChain installation instructions instead — the steps below are for username & password access.

Prerequisites

npm package manager installed
TuxCare registry token — contact [email protected]
To browse available artifacts, visit TuxCare Nexus and click Sign in in the top right corner. You may need to refresh the page after logging in.

Create or update the .npmrc file
Navigate to the root directory of your Vue project and create a .npmrc file or update it if it already exists.
Example:
```
my-vue-project/
├── node_modules/
├── package.json
├── .npmrc         ⚠️ ← Create it here
└── package-lock.json
```
Configure the npm registry
Use an editor of your choice (e.g., VS Code) to add the following registry address lines to the .npmrc file:
```
registry=https://registry.npmjs.org/
@els-vue:registry=https://nexus.repo.tuxcare.com/repository/els_vue/
//nexus.repo.tuxcare.com/repository/els_vue/:_auth=${TOKEN}
```
Replace ${TOKEN} with the token you received from [email protected].

Update dependencies

Update your package.json dependencies to use TuxCare packages.

For exact available patched versions, check your Nexus access first. The snippets below are examples. The >= range with -tuxcare.1 resolves to the latest TuxCare build for that upstream Vue version.

Choose version:

"dependencies": {
  "vue": "npm:@els-vue/vue@>=2.7.16-tuxcare.1",
  "@vue/server-renderer": "npm:@els-vue/vue-server-renderer@>=2.7.16-tuxcare.1",
  "vue-template-compiler": "npm:@els-vue/vue-template-compiler@>=2.7.16-tuxcare.1"
},
"overrides": {
  "[email protected]": "npm:@els-vue/vue@>=2.7.16-tuxcare.1",
  "@vue/[email protected]": "npm:@els-vue/vue-server-renderer@>=2.7.16-tuxcare.1",
  "[email protected]": "npm:@els-vue/vue-template-compiler@>=2.7.16-tuxcare.1"
}

Refresh the project dependencies
Remove node_modules, package-lock.json, and clear the npm cache:
```
rm -rf node_modules package-lock.json && npm cache clean --force
```
Install dependencies:
```
npm install
```
The token for the TuxCare repository is automatically picked up from your .npmrc file.
Verify the setup
Use npm to list the project's dependencies and confirm that npm resolves TuxCare packages correctly:
```
npm list
```
After reviewing the dependencies, run your application to ensure everything works correctly. The npm tool identifies and resolves dependencies from the TuxCare ELS for Vue repository.

What's Next?

CVE Tracker — Track vulnerability fixes and updates
Available fixes — Patched versions and changelogs
Supported components — Full list of product parts covered by ELS
VEX feed — Vulnerability Exploitability eXchange feed
SBOM — Software Bill of Materials (security.tuxcare.com)
Package updates — Update an installed package to a newer TuxCare release

Edit this page

# Vue

# Supported Versions

# Installation

Prerequisites

# What's Next?

Vue

Supported Versions

Installation

What's Next?