Intlify vulnerabilities
We track 2 vulnerabilities in Intlify products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest Intlify vulnerabilities
- 7.2 High severity
vue-i18n: Improper Neutralization of Input During Web Page Generation
Vue I18n is the internationalization plugin for Vue.js. From 11.1.10 until 11.4.14 and from 12.0.0-alpha.4 until 12.0.0-alpha.5, sanitizeTranslatedHtml() escapes markup and event-handler text inside an iframe srcdoc value but leaves the srcdoc attribute active
- 8.9 High severity
vue-i18n: Improperly Controlled Modification of Object Prototype Attributes
Vue I18n is the internationalization plugin for Vue.js. @intlify/message-resolver and @intlify/vue-i18n-core are vulnerable to Prototype Pollution through the entry function: handleFlatJson. An attacker can supply a payload with Object.prototype setter to intr