Skip to content
OpenAdvisories

Package · npm

@intlify/core

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-53892

    Intlify Vue I18n's escapeParameterHtml does not prevent DOM-based XSS via tag attributes like onerror

    Vue I18n is the internationalization plugin for Vue.js. The escapeParameterHtml: true option in Vue I18n is designed to protect against HTML/script injection by escaping interpolated parameters. However, starting in version 9.0.0 and prior to versions 9.14.5,…

    intlify vue-i18n @intlify/vue-i18n-core petite-vue-i18n npm
  • Medium 5.3
    CVE-2024-52809

    Cross-site Scripting vulnerability with prototype pollution in vue-i18n

    vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to `createI18n` or `useI18n`. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. …

    intlify vue-i18n vue-i18n @intlify/vue-i18n-core npm