CVE-2025-27597
6 advisories.
npm/@intlify/message-resolver CVE-2025-27597: high
Vue I18n Allows Prototype Pollution in `handleFlatJson`
Action: Upgrade @intlify/message-resolver to 9.1.11 or later.
npm i @intlify/message-resolver@9.1.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.1.0 | 9.1.11 | - |
Fixed versions
| 9.1.11 |
Sources
- osv: GHSA-p2ph-7g93-hw3m
- https://github.com/intlify/vue-i18n/security/advisories/GHSA-p2ph-7g93-hw3m
- https://nvd.nist.gov/vuln/detail/CVE-2025-27597
- https://github.com/intlify/vue-i18n/commit/4bb6eacda7fc2cde5687549afa0efb27ca40862a
- https://github.com/intlify/vue-i18n/commit/d21e06a7440eed8ada7f522b22fcf830b98d3a53
- https://github.com/intlify/vue-i18n/commit/fbda9988d3ddd3a1a21740d506d2c183d6b6e36a
- https://github.com/intlify/vue-i18n/commit/feaf13fcff427f2cb1d5ec8076e639506ba28f9e
- https://github.com/intlify/vue-i18n
- https://github.com/intlify/vue-i18n/releases/tag/v10.0.6
- https://github.com/intlify/vue-i18n/releases/tag/v11.1.2
- https://github.com/intlify/vue-i18n/releases/tag/v9.14.3
CVE-2025-27597 · published · modified · JSON
npm/@intlify/vue-i18n-core CVE-2025-27597: high
Vue I18n Allows Prototype Pollution in `handleFlatJson`
Action: Upgrade @intlify/vue-i18n-core to 9.14.3 or later.
npm i @intlify/vue-i18n-core@9.14.3npm i @intlify/vue-i18n-core@10.0.6npm i @intlify/vue-i18n-core@11.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.2.0 | 9.14.3 | - |
| 10.0.0-alpha.1 | 10.0.6 | - |
| 11.0.0-beta.0 | 11.1.2 | - |
Fixed versions
| 9.14.3 | 10.0.6 | 11.1.2 |
Sources
- osv: GHSA-p2ph-7g93-hw3m#npm/@intlify/vue-i18n-core
- https://github.com/intlify/vue-i18n/security/advisories/GHSA-p2ph-7g93-hw3m
- https://nvd.nist.gov/vuln/detail/CVE-2025-27597
- https://github.com/intlify/vue-i18n/commit/4bb6eacda7fc2cde5687549afa0efb27ca40862a
- https://github.com/intlify/vue-i18n/commit/d21e06a7440eed8ada7f522b22fcf830b98d3a53
- https://github.com/intlify/vue-i18n/commit/fbda9988d3ddd3a1a21740d506d2c183d6b6e36a
- https://github.com/intlify/vue-i18n/commit/feaf13fcff427f2cb1d5ec8076e639506ba28f9e
- https://github.com/intlify/vue-i18n
- https://github.com/intlify/vue-i18n/releases/tag/v10.0.6
- https://github.com/intlify/vue-i18n/releases/tag/v11.1.2
- https://github.com/intlify/vue-i18n/releases/tag/v9.14.3
CVE-2025-27597 · published · modified · JSON
npm/petite-vue-i18n CVE-2025-27597: high
Vue I18n Allows Prototype Pollution in `handleFlatJson`
Action: Upgrade petite-vue-i18n to 10.0.6 or later.
npm i petite-vue-i18n@10.0.6npm i petite-vue-i18n@11.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.0.0 | 10.0.6 | - |
| 11.0.0-beta.0 | 11.1.2 | - |
Fixed versions
| 10.0.6 | 11.1.2 |
Sources
- osv: GHSA-p2ph-7g93-hw3m#npm/petite-vue-i18n
- https://github.com/intlify/vue-i18n/security/advisories/GHSA-p2ph-7g93-hw3m
- https://nvd.nist.gov/vuln/detail/CVE-2025-27597
- https://github.com/intlify/vue-i18n/commit/4bb6eacda7fc2cde5687549afa0efb27ca40862a
- https://github.com/intlify/vue-i18n/commit/d21e06a7440eed8ada7f522b22fcf830b98d3a53
- https://github.com/intlify/vue-i18n/commit/fbda9988d3ddd3a1a21740d506d2c183d6b6e36a
- https://github.com/intlify/vue-i18n/commit/feaf13fcff427f2cb1d5ec8076e639506ba28f9e
- https://github.com/intlify/vue-i18n
- https://github.com/intlify/vue-i18n/releases/tag/v10.0.6
- https://github.com/intlify/vue-i18n/releases/tag/v11.1.2
- https://github.com/intlify/vue-i18n/releases/tag/v9.14.3
CVE-2025-27597 · published · modified · JSON
npm/vue-i18n CVE-2025-27597: high
Vue I18n Allows Prototype Pollution in `handleFlatJson`
Action: Upgrade vue-i18n to 9.14.3 or later.
npm i vue-i18n@9.14.3npm i vue-i18n@10.0.6npm i vue-i18n@11.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.1.0 | 9.14.3 | - |
| 10.0.0-alpha.1 | 10.0.6 | - |
| 11.0.0-beta.0 | 11.1.2 | - |
Fixed versions
| 9.14.3 | 10.0.6 | 11.1.2 |
Sources
- osv: GHSA-p2ph-7g93-hw3m#npm/vue-i18n
- https://github.com/intlify/vue-i18n/security/advisories/GHSA-p2ph-7g93-hw3m
- https://nvd.nist.gov/vuln/detail/CVE-2025-27597
- https://github.com/intlify/vue-i18n/commit/4bb6eacda7fc2cde5687549afa0efb27ca40862a
- https://github.com/intlify/vue-i18n/commit/d21e06a7440eed8ada7f522b22fcf830b98d3a53
- https://github.com/intlify/vue-i18n/commit/fbda9988d3ddd3a1a21740d506d2c183d6b6e36a
- https://github.com/intlify/vue-i18n/commit/feaf13fcff427f2cb1d5ec8076e639506ba28f9e
- https://github.com/intlify/vue-i18n
- https://github.com/intlify/vue-i18n/releases/tag/v10.0.6
- https://github.com/intlify/vue-i18n/releases/tag/v11.1.2
- https://github.com/intlify/vue-i18n/releases/tag/v9.14.3
CVE-2025-27597 · published · modified · JSON
npm/@intlify/core-base CVE-2025-27597: high
Vue I18n Allows Prototype Pollution in `handleFlatJson`
Action: Upgrade @intlify/core-base to 9.1.11 or later.
npm i @intlify/core-base@9.1.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.1.0 | 9.1.11 | - |
Fixed versions
| 9.1.11 |
Sources
- osv: GHSA-p2ph-7g93-hw3m#npm/@intlify/core-base
- https://github.com/intlify/vue-i18n/security/advisories/GHSA-p2ph-7g93-hw3m
- https://nvd.nist.gov/vuln/detail/CVE-2025-27597
- https://github.com/intlify/vue-i18n/commit/4bb6eacda7fc2cde5687549afa0efb27ca40862a
- https://github.com/intlify/vue-i18n/commit/d21e06a7440eed8ada7f522b22fcf830b98d3a53
- https://github.com/intlify/vue-i18n/commit/fbda9988d3ddd3a1a21740d506d2c183d6b6e36a
- https://github.com/intlify/vue-i18n/commit/feaf13fcff427f2cb1d5ec8076e639506ba28f9e
- https://github.com/intlify/vue-i18n
- https://github.com/intlify/vue-i18n/releases/tag/v10.0.6
- https://github.com/intlify/vue-i18n/releases/tag/v11.1.2
- https://github.com/intlify/vue-i18n/releases/tag/v9.14.3
CVE-2025-27597 · published · modified · JSON
npm/@intlify/core CVE-2025-27597: high
Vue I18n Allows Prototype Pollution in `handleFlatJson`
Action: Upgrade @intlify/core to 9.1.11 or later.
npm i @intlify/core@9.1.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.1.0 | 9.1.11 | - |
Fixed versions
| 9.1.11 |
Sources
- osv: GHSA-p2ph-7g93-hw3m#npm/@intlify/core
- https://github.com/intlify/vue-i18n/security/advisories/GHSA-p2ph-7g93-hw3m
- https://nvd.nist.gov/vuln/detail/CVE-2025-27597
- https://github.com/intlify/vue-i18n/commit/4bb6eacda7fc2cde5687549afa0efb27ca40862a
- https://github.com/intlify/vue-i18n/commit/d21e06a7440eed8ada7f522b22fcf830b98d3a53
- https://github.com/intlify/vue-i18n/commit/fbda9988d3ddd3a1a21740d506d2c183d6b6e36a
- https://github.com/intlify/vue-i18n/commit/feaf13fcff427f2cb1d5ec8076e639506ba28f9e
- https://github.com/intlify/vue-i18n
- https://github.com/intlify/vue-i18n/releases/tag/v10.0.6
- https://github.com/intlify/vue-i18n/releases/tag/v11.1.2
- https://github.com/intlify/vue-i18n/releases/tag/v9.14.3
CVE-2025-27597 · published · modified · JSON