{"action":"Upgrade petite-vue-i18n to 10.0.6 or later.","affected":[{"fixed":"10.0.6","introduced":"10.0.0"},{"fixed":"11.1.2","introduced":"11.0.0-beta.0"}],"component":"petite-vue-i18n","cve_ids":["CVE-2025-27597"],"ecosystem":"npm","epss":0.00625,"exploited":false,"fixed_versions":["10.0.6","11.1.2"],"ghsa_id":"GHSA-p2ph-7g93-hw3m","id":"tcs_01M5KG28M9BZTTW9TPY2XV3QWN","modified_at":"2026-08-26T01:21:39.693367499Z","published_at":"2025-03-07T15:58:24Z","references":["https://osv.dev/vulnerability/GHSA-p2ph-7g93-hw3m","https://github.com/intlify/vue-i18n/security/advisories/GHSA-p2ph-7g93-hw3m","https://nvd.nist.gov/vuln/detail/CVE-2025-27597","https://github.com/intlify/vue-i18n/commit/4bb6eacda7fc2cde5687549afa0efb27ca40862a","https://github.com/intlify/vue-i18n/commit/d21e06a7440eed8ada7f522b22fcf830b98d3a53","https://github.com/intlify/vue-i18n/commit/fbda9988d3ddd3a1a21740d506d2c183d6b6e36a","https://github.com/intlify/vue-i18n/commit/feaf13fcff427f2cb1d5ec8076e639506ba28f9e","https://github.com/intlify/vue-i18n","https://github.com/intlify/vue-i18n/releases/tag/v10.0.6","https://github.com/intlify/vue-i18n/releases/tag/v11.1.2","https://github.com/intlify/vue-i18n/releases/tag/v9.14.3"],"severity":{"label":"high","score":8.9},"sources":[{"source":"osv","source_id":"GHSA-p2ph-7g93-hw3m#npm/petite-vue-i18n","url":"https://osv.dev/vulnerability/GHSA-p2ph-7g93-hw3m"},{"source":"nvd","source_id":"CVE-2025-27597","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27597"}],"summary":"Vue I18n Allows Prototype Pollution in `handleFlatJson`"}