CVE-2025-53892
5 advisories.
npm/vue-i18n CVE-2025-53892: medium, EPSS 0.81%
vue-i18n's escapeParameterHtml does not prevent DOM-based XSS through its tag attributes
Action: Upgrade vue-i18n to 9.14.5 or later.
npm i vue-i18n@9.14.5npm i vue-i18n@10.0.8npm i vue-i18n@11.1.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.0.0 | 9.14.5 | - |
| 10.0.0 | 10.0.8 | - |
| 11.0.0 | 11.1.10 | - |
Fixed versions
| 9.14.5 | 10.0.8 | 11.1.10 |
Sources
- osv: GHSA-x8qp-wqqm-57ph
- https://github.com/intlify/vue-i18n/security/advisories/GHSA-x8qp-wqqm-57ph
- https://nvd.nist.gov/vuln/detail/CVE-2025-53892
- https://github.com/intlify/vue-i18n/pull/2229
- https://github.com/intlify/vue-i18n/pull/2230
- https://github.com/intlify/vue-i18n/commit/49f982443ab8fd94ecc427b265ce97d57df94d7e
- https://github.com/intlify/vue-i18n/commit/a47099619fb9b256e86341a8658ebe72e92ab099
- https://github.com/intlify/vue-i18n
- https://github.com/intlify/vue-i18n/releases/tag/v10.0.8
- https://github.com/intlify/vue-i18n/releases/tag/v11.1.10
- https://github.com/intlify/vue-i18n/releases/tag/v9.14.5
CVE-2025-53892 · published · modified · JSON
npm/@intlify/core CVE-2025-53892: medium, EPSS 0.81%
vue-i18n's escapeParameterHtml does not prevent DOM-based XSS through its tag attributes
Action: Upgrade @intlify/core to 9.14.5 or later.
npm i @intlify/core@9.14.5npm i @intlify/core@10.0.8npm i @intlify/core@11.1.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.0.0 | 9.14.5 | - |
| 10.0.0 | 10.0.8 | - |
| 11.0.0 | 11.1.10 | - |
Fixed versions
| 9.14.5 | 10.0.8 | 11.1.10 |
Sources
- osv: GHSA-x8qp-wqqm-57ph#npm/@intlify/core
- https://github.com/intlify/vue-i18n/security/advisories/GHSA-x8qp-wqqm-57ph
- https://nvd.nist.gov/vuln/detail/CVE-2025-53892
- https://github.com/intlify/vue-i18n/pull/2229
- https://github.com/intlify/vue-i18n/pull/2230
- https://github.com/intlify/vue-i18n/commit/49f982443ab8fd94ecc427b265ce97d57df94d7e
- https://github.com/intlify/vue-i18n/commit/a47099619fb9b256e86341a8658ebe72e92ab099
- https://github.com/intlify/vue-i18n
- https://github.com/intlify/vue-i18n/releases/tag/v10.0.8
- https://github.com/intlify/vue-i18n/releases/tag/v11.1.10
- https://github.com/intlify/vue-i18n/releases/tag/v9.14.5
CVE-2025-53892 · published · modified · JSON
npm/@intlify/core-base CVE-2025-53892: medium, EPSS 0.81%
vue-i18n's escapeParameterHtml does not prevent DOM-based XSS through its tag attributes
Action: Upgrade @intlify/core-base to 9.14.5 or later.
npm i @intlify/core-base@9.14.5npm i @intlify/core-base@10.0.8npm i @intlify/core-base@11.1.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.0.0 | 9.14.5 | - |
| 10.0.0 | 10.0.8 | - |
| 11.0.0 | 11.1.10 | - |
Fixed versions
| 9.14.5 | 10.0.8 | 11.1.10 |
Sources
- osv: GHSA-x8qp-wqqm-57ph#npm/@intlify/core-base
- https://github.com/intlify/vue-i18n/security/advisories/GHSA-x8qp-wqqm-57ph
- https://nvd.nist.gov/vuln/detail/CVE-2025-53892
- https://github.com/intlify/vue-i18n/pull/2229
- https://github.com/intlify/vue-i18n/pull/2230
- https://github.com/intlify/vue-i18n/commit/49f982443ab8fd94ecc427b265ce97d57df94d7e
- https://github.com/intlify/vue-i18n/commit/a47099619fb9b256e86341a8658ebe72e92ab099
- https://github.com/intlify/vue-i18n
- https://github.com/intlify/vue-i18n/releases/tag/v10.0.8
- https://github.com/intlify/vue-i18n/releases/tag/v11.1.10
- https://github.com/intlify/vue-i18n/releases/tag/v9.14.5
CVE-2025-53892 · published · modified · JSON
npm/@intlify/vue-i18n-core CVE-2025-53892: medium, EPSS 0.81%
vue-i18n's escapeParameterHtml does not prevent DOM-based XSS through its tag attributes
Action: Upgrade @intlify/vue-i18n-core to 9.14.5 or later.
npm i @intlify/vue-i18n-core@9.14.5npm i @intlify/vue-i18n-core@10.0.8npm i @intlify/vue-i18n-core@11.1.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.2.0 | 9.14.5 | - |
| 10.0.0 | 10.0.8 | - |
| 11.0.0 | 11.1.10 | - |
Fixed versions
| 9.14.5 | 10.0.8 | 11.1.10 |
Sources
- osv: GHSA-x8qp-wqqm-57ph#npm/@intlify/vue-i18n-core
- https://github.com/intlify/vue-i18n/security/advisories/GHSA-x8qp-wqqm-57ph
- https://nvd.nist.gov/vuln/detail/CVE-2025-53892
- https://github.com/intlify/vue-i18n/pull/2229
- https://github.com/intlify/vue-i18n/pull/2230
- https://github.com/intlify/vue-i18n/commit/49f982443ab8fd94ecc427b265ce97d57df94d7e
- https://github.com/intlify/vue-i18n/commit/a47099619fb9b256e86341a8658ebe72e92ab099
- https://github.com/intlify/vue-i18n
- https://github.com/intlify/vue-i18n/releases/tag/v10.0.8
- https://github.com/intlify/vue-i18n/releases/tag/v11.1.10
- https://github.com/intlify/vue-i18n/releases/tag/v9.14.5
CVE-2025-53892 · published · modified · JSON
npm/petite-vue-i18n CVE-2025-53892: medium, EPSS 0.81%
vue-i18n's escapeParameterHtml does not prevent DOM-based XSS through its tag attributes
Action: Upgrade petite-vue-i18n to 10.0.8 or later.
npm i petite-vue-i18n@10.0.8npm i petite-vue-i18n@11.1.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.0.0 | 10.0.8 | - |
| 11.0.0 | 11.1.10 | - |
Fixed versions
| 10.0.8 | 11.1.10 |
Sources
- osv: GHSA-x8qp-wqqm-57ph#npm/petite-vue-i18n
- https://github.com/intlify/vue-i18n/security/advisories/GHSA-x8qp-wqqm-57ph
- https://nvd.nist.gov/vuln/detail/CVE-2025-53892
- https://github.com/intlify/vue-i18n/pull/2229
- https://github.com/intlify/vue-i18n/pull/2230
- https://github.com/intlify/vue-i18n/commit/49f982443ab8fd94ecc427b265ce97d57df94d7e
- https://github.com/intlify/vue-i18n/commit/a47099619fb9b256e86341a8658ebe72e92ab099
- https://github.com/intlify/vue-i18n
- https://github.com/intlify/vue-i18n/releases/tag/v10.0.8
- https://github.com/intlify/vue-i18n/releases/tag/v11.1.10
- https://github.com/intlify/vue-i18n/releases/tag/v9.14.5
CVE-2025-53892 · published · modified · JSON