Vendor

    Intlify

    6 known vulnerabilities in products by Intlify, 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Intlify
    HighCVE-2025-27597

    Vue I18n Prototype Pollution in `handleFlatJson`

    —
    HighCVE-2026-118257

    Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages

    7.2
    MediumCVE-2024-52810

    Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4

    —
    MediumCVE-2025-53892

    Intlify Vue-i18n: Cross-site Scripting

    —
    MediumCVE-2024-52809

    Cross-site Scripting vulnerability with prototype pollution in vue-i18n

    —
    LowCVE-2026-118256

    Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list

    —

    Products

    Products by Intlify
    Vue-i18n60