MEDIUMnpm
GHSA-9r9m-ffp6-9x4v· CVE-2024-52809vue-i18n has cross-site scripting vulnerability with prototype pollution
Modified: 12/2/2024
package
npm/@intlify/core
pkg:npm/%40intlify/core
HIGHnpm
GHSA-p2ph-7g93-hw3m· CVE-2025-27597Vue I18n Allows Prototype Pollution in `handleFlatJson`
Modified: 8/26/2026
MEDIUMnpm
GHSA-x8qp-wqqm-57ph· CVE-2025-53892vue-i18n's escapeParameterHtml does not prevent DOM-based XSS through its tag attributes
Modified: 9/10/2026