Skip to content
OpenAdvisories

Package · npm

@intlify/shared

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.2
    CVE-2026-118257

    Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages

    Vue I18n is the internationalization plugin for Vue.js. From 11.1.10 until 11.4.14 and from 12.0.0-alpha.4 until 12.0.0-alpha.5, sanitizeTranslatedHtml() escapes markup and event-handler text inside an iframe srcdoc value but leaves the srcdoc attribute activ…

    intlify vue-i18n @intlify/vue-i18n-core petite-vue-i18n npm
  • Medium 6.9
    CVE-2024-52810

    Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4

    @intlify/shared is a shared library for the intlify project. The latest version of @intlify/shared (10.0.4) is vulnerable to Prototype Pollution through the entry function(s) lib.deepCopy. An attacker can supply a payload with Object.prototype setter to intro…

    intlify vue-i18n @intlify/vue-i18n-core petite-vue-i18n npm