Vulnerabilities

TI-2026-82144 CVE-2026-118257 · GHSA-83rm-6c8r-g728

Cross-site scripting in Vue I18n translations through iframe srcdoc

LOW 37

Vue I18n is the internationalization plugin for Vue.js.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00272 Published 2026-10-28 Fixed in 11.4.14, 12.0.0-alpha.5 CWE-116

TI-2026-82143 CVE-2026-118256 · GHSA-8rc2-428q-7ww3

MEDIUM 44

Vue I18n is the internationalization plugin for Vue.js.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.0048 Published 2026-10-28 Fixed in 11.4.14, 12.0.0-alpha.5 CWE-116

TI-2025-33767 CVE-2025-53892 · GHSA-x8qp-wqqm-57ph

MEDIUM 57

Vue I18n is the internationalization plugin for Vue.js.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00808 Published 2025-07-16 Fixed in 9.14.5, 10.0.8 +2 CWE-79

TI-2025-20407 CVE-2025-27597 · GHSA-p2ph-7g93-hw3m

HIGH 80

Vue I18n is the internationalization plugin for Vue.js.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00625 Published 2025-03-07 Fixed in 9.14.3, 10.0.6 +2 CWE-1321

TI-2024-35322 CVE-2024-52810 · GHSA-hjwq-mjwj-4x6c

HIGH 70

@intlify/shared is a shared library for the intlify project.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00767 Published 2024-11-29 Fixed in 9.14.2, 10.0.5 CWE-1321

TI-2024-35321 CVE-2024-52809 · GHSA-9r9m-ffp6-9x4v

MEDIUM 57

vue-i18n is an internationalization plugin for Vue.js.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00674 Published 2024-11-29 Fixed in 9.14.2, 10.0.5 CWE-79