VU
Product
vue-i18n
3
CVEs
0
On KEV
7.2
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 1Low 1
Watch
Add vue-i18n to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-118257 New | 7.2 | Oct 28 | Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages Affected: = 9.14.5; = 10.0.8; >= 11.1.10, < 11.4.14; >= 12.0.0-alpha.4, < 12.0.0-alpha.5 |
| CVE-2025-53892 | 5.3 | Jul 16 | Intlify Vue I18n's escapeParameterHtml does not prevent DOM-based XSS via tag attributes like onerror Affected: >= 9.0.0, < 9.14.5; >= 10.0.0, < 10.0.8; >= 11.0.0, < 11.1.0 |
| CVE-2026-118256 New | 2.1 | Oct 28 | Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list Affected: >= 9.0.0-beta.5, < 11.4.14; >= 12.0.0-alpha.1, < 12.0.0-alpha.5 |
Showing 3