Skip to content
OpenAdvisories

Vendor

intlify

6 known vulnerabilities.

Products

vue-i18n 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-118257

    Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages

    Vue I18n is the internationalization plugin for Vue.js. From 11.1.10 until 11.4.14 and from 12.0.0-alpha.4 until 12.0.0-alpha.5, sanitizeTranslatedHtml() escapes markup and event-handler text inside an iframe srcdoc value but leaves the srcdoc attribute activ…

    intlify vue-i18n @intlify/vue-i18n-core petite-vue-i18n npm
  • High 8.9
    CVE-2025-27597

    Vue I18n Prototype Pollution in `handleFlatJson`

    Vue I18n is the internationalization plugin for Vue.js. @intlify/message-resolver and @intlify/vue-i18n-core are vulnerable to Prototype Pollution through the entry function: handleFlatJson. An attacker can supply a payload with Object.prototype setter to int…

    intlify vue-i18n @intlify/vue-i18n-core petite-vue-i18n npm