npm/petite-vue-i18n CVE-2025-53892: medium, EPSS 0.81%
vue-i18n's escapeParameterHtml does not prevent DOM-based XSS through its tag attributes
Action: Upgrade petite-vue-i18n to 10.0.8 or later.
npm i petite-vue-i18n@10.0.8npm i petite-vue-i18n@11.1.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.0.0 | 10.0.8 | - |
| 11.0.0 | 11.1.10 | - |
Fixed versions
| 10.0.8 | 11.1.10 |
Sources
- osv: GHSA-x8qp-wqqm-57ph#npm/petite-vue-i18n
- https://github.com/intlify/vue-i18n/security/advisories/GHSA-x8qp-wqqm-57ph
- https://nvd.nist.gov/vuln/detail/CVE-2025-53892
- https://github.com/intlify/vue-i18n/pull/2229
- https://github.com/intlify/vue-i18n/pull/2230
- https://github.com/intlify/vue-i18n/commit/49f982443ab8fd94ecc427b265ce97d57df94d7e
- https://github.com/intlify/vue-i18n/commit/a47099619fb9b256e86341a8658ebe72e92ab099
- https://github.com/intlify/vue-i18n
- https://github.com/intlify/vue-i18n/releases/tag/v10.0.8
- https://github.com/intlify/vue-i18n/releases/tag/v11.1.10
- https://github.com/intlify/vue-i18n/releases/tag/v9.14.5
CVE-2025-53892 · published · modified · JSON