What’s Vulnerable › Products

intlify vue-i18n vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your intlify vue-i18n version is affected

Latest intlify vue-i18n vulnerabilities

• CVE-2026-118257 — Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages (CVSS 7.2)
• CVE-2026-118256 — Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list (CVSS 2.1)
• CVE-2025-53892 — Intlify Vue I18n's escapeParameterHtml does not prevent DOM-based XSS via tag attributes like onerror (CVSS 5.3)
• CVE-2025-27597 — Vue I18n Prototype Pollution in `handleFlatJson` (CVSS 8.9)
• CVE-2024-52810 — Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4 (CVSS 6.9)
• CVE-2024-52809 — Cross-site Scripting vulnerability with prototype pollution in vue-i18n (CVSS 5.3)