Iintlify

Products

Exploited and recent CVEs

• CVE-2026-118257 High 7.2 Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages 0.3%
• CVE-2026-118256 Low 2.1 Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list 0.5%
• CVE-2025-53892 Medium 5.3 Intlify Vue I18n's escapeParameterHtml does not prevent DOM-based XSS via tag attributes like onerror 0.8%
• CVE-2025-27597 High 8.9 Vue I18n Prototype Pollution in `handleFlatJson` 0.6%
• CVE-2024-52810 Medium 6.9 Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4 0.8%
• CVE-2024-52809 Medium 5.3 Cross-site Scripting vulnerability with prototype pollution in vue-i18n 0.7%