[ Vendor · 2 CVEs ]
intlify
CVEs affecting intlify published in the last 30 days, plus any intlify CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-118256 | 28 Oct 2026 | CVSS 2.1 | Vue I18n: `escapeParameter` does not escape named values when the same call also passes a listVue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 and 12.0.0-alpha.5, enabling escapeParameter, called… | Fix |
| CVE-2026-118257 | 28 Oct 2026 | CVSS 7.2 | Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messagesVue I18n is the internationalization plugin for Vue.js. From 11.1.10 until 11.4.14 and from 12.0.0-alpha.4 until 12.0.0-alpha.5… | Fix |