npm/@intlify/vue-i18n-core — 4 CVEs

—CVE-2025-53892vue-i18n's escapeParameterHtml does not prevent DOM-based XSS through its tag attributes

>= 9.2.0, < 9.14.5

—CVE-2025-27597Vue I18n Allows Prototype Pollution in `handleFlatJson`

>= 9.2.0, < 9.14.3

—CVE-2024-52810@intlify/shared Prototype Pollution vulnerability

>= 9.7.0, < 9.14.2

—CVE-2024-52809vue-i18n has cross-site scripting vulnerability with prototype pollution

>= 9.3.0, < 9.14.2

pkg:npm/@intlify/vue-i18n-core