[ Vendor · 2 CVEs ]

intlify

CVEs affecting intlify published in the last 30 days, plus any intlify CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-118256 28 Oct 2026 CVSS 2.1 Vue I18n: `escapeParameter` does not escape named values when the same call also passes a listVue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 and 12.0.0-alpha.5, enabling escapeParameter, called… Fix
CVE-2026-118257 28 Oct 2026 CVSS 7.2 Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messagesVue I18n is the internationalization plugin for Vue.js. From 11.1.10 until 11.4.14 and from 12.0.0-alpha.4 until 12.0.0-alpha.5… Fix