npm/next-intl

next-intl has prototype pollution with `experimental.messages.precompile` via attacker-controlled translation catalog keys

Modified: 5/6/2026

next-intl has an open redirect vulnerability

Modified: 5/5/2026