{"action":"Upgrade @intlify/core-base to 9.14.2 or later.","affected":[{"fixed":"9.14.2","introduced":"9.3.0"},{"fixed":"10.0.5","introduced":"10.0.0"}],"component":"@intlify/core-base","cve_ids":["CVE-2024-52809"],"ecosystem":"npm","epss":0.00674,"exploited":false,"fixed_versions":["9.14.2","10.0.5"],"ghsa_id":"GHSA-9r9m-ffp6-9x4v","id":"tcs_01M5KFGV38C25RECM05YMS1SW8","modified_at":"2024-12-02T17:42:18.263434Z","published_at":"2024-12-02T17:26:20Z","references":["https://osv.dev/vulnerability/GHSA-9r9m-ffp6-9x4v","https://github.com/intlify/vue-i18n/security/advisories/GHSA-9r9m-ffp6-9x4v","https://nvd.nist.gov/vuln/detail/CVE-2024-52809","https://github.com/intlify/vue-i18n/commit/72f0d323006fc7363b18cab62d4522dadd874411","https://github.com/intlify/vue-i18n/commit/9f20909ef8c9232a1072d7818e12ed6d6451024d","https://github.com/intlify/vue-i18n"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-9r9m-ffp6-9x4v","url":"https://osv.dev/vulnerability/GHSA-9r9m-ffp6-9x4v"},{"source":"nvd","source_id":"CVE-2024-52809","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52809"}],"summary":"vue-i18n has cross-site scripting vulnerability with prototype pollution"}