Skip to content
OpenAdvisories

Vendor

intlify

6 known vulnerabilities.

Products

vue-i18n 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-53892

    Intlify Vue I18n's escapeParameterHtml does not prevent DOM-based XSS via tag attributes like onerror

    Vue I18n is the internationalization plugin for Vue.js. The escapeParameterHtml: true option in Vue I18n is designed to protect against HTML/script injection by escaping interpolated parameters. However, starting in version 9.0.0 and prior to versions 9.14.5,…

    intlify vue-i18n @intlify/vue-i18n-core petite-vue-i18n npm
  • Medium 6.9
    CVE-2024-52810

    Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4

    @intlify/shared is a shared library for the intlify project. The latest version of @intlify/shared (10.0.4) is vulnerable to Prototype Pollution through the entry function(s) lib.deepCopy. An attacker can supply a payload with Object.prototype setter to intro…

    intlify vue-i18n vue-i18n @intlify/vue-i18n-core npm
  • Medium 5.3
    CVE-2024-52809

    Cross-site Scripting vulnerability with prototype pollution in vue-i18n

    vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to `createI18n` or `useI18n`. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. …

    intlify vue-i18n vue-i18n @intlify/vue-i18n-core npm