npm/vue-i18n CVE-2025-27597: high 8.9, EPSS 0.63%
Vue I18n Allows Prototype Pollution in `handleFlatJson`
Action: Upgrade vue-i18n to 9.14.3 or later.
npm i vue-i18n@9.14.3npm i vue-i18n@10.0.6npm i vue-i18n@11.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.1.0 | 9.14.3 | - |
| 10.0.0-alpha.1 | 10.0.6 | - |
| 11.0.0-beta.0 | 11.1.2 | - |
Fixed versions
| 9.14.3 | 10.0.6 | 11.1.2 |
Sources
- osv: GHSA-p2ph-7g93-hw3m#npm/vue-i18n
- nvd: CVE-2025-27597
- https://github.com/intlify/vue-i18n/security/advisories/GHSA-p2ph-7g93-hw3m
- https://github.com/intlify/vue-i18n/commit/4bb6eacda7fc2cde5687549afa0efb27ca40862a
- https://github.com/intlify/vue-i18n/commit/d21e06a7440eed8ada7f522b22fcf830b98d3a53
- https://github.com/intlify/vue-i18n/commit/fbda9988d3ddd3a1a21740d506d2c183d6b6e36a
- https://github.com/intlify/vue-i18n/commit/feaf13fcff427f2cb1d5ec8076e639506ba28f9e
- https://github.com/intlify/vue-i18n
- https://github.com/intlify/vue-i18n/releases/tag/v10.0.6
- https://github.com/intlify/vue-i18n/releases/tag/v11.1.2
- https://github.com/intlify/vue-i18n/releases/tag/v9.14.3
CVE-2025-27597 · published · modified · JSON