Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/vue-i18n@11.0.1
Typenpm
Namespace
Namevue-i18n
Version11.0.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version11.1.10
Latest_non_vulnerable_version12.0.0-alpha.1
Affected_by_vulnerabilities
0
url VCID-zhyn-mt8m-h7aw
vulnerability_id VCID-zhyn-mt8m-h7aw
summary 
vue-i18n's escapeParameterHtml does not prevent DOM-based XSS through its tag attributes
The escapeParameterHtml: true option in Vue I18n is designed to protect against HTML/script injection by escaping interpolated parameters. However, this setting fails to prevent execution of certain tag-based payloads, such as `<img src=x onerror=...>`, if the interpolated value is inserted inside an HTML context using v-html.

This may lead to a DOM-based XSS vulnerability, even when using escapeParameterHtml: true, if a translation string includes minor HTML and is rendered via v-html.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-53892
reference_id
reference_type
scores
0
value 0.00537
scoring_system epss
scoring_elements 0.67924
published_at 2026-06-06T12:55:00Z
1
value 0.00537
scoring_system epss
scoring_elements 0.67914
published_at 2026-06-07T12:55:00Z
2
value 0.00537
scoring_system epss
scoring_elements 0.67917
published_at 2026-06-05T12:55:00Z
3
value 0.00586
scoring_system epss
scoring_elements 0.69495
published_at 2026-06-08T12:55:00Z
4
value 0.00586
scoring_system epss
scoring_elements 0.69515
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-53892
1
reference_url https://github.com/intlify/vue-i18n
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intlify/vue-i18n
2
reference_url https://github.com/intlify/vue-i18n/commit/49f982443ab8fd94ecc427b265ce97d57df94d7e
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-07-22T14:58:31Z/
url https://github.com/intlify/vue-i18n/commit/49f982443ab8fd94ecc427b265ce97d57df94d7e
3
reference_url https://github.com/intlify/vue-i18n/commit/a47099619fb9b256e86341a8658ebe72e92ab099
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-07-22T14:58:31Z/
url https://github.com/intlify/vue-i18n/commit/a47099619fb9b256e86341a8658ebe72e92ab099
4
reference_url https://github.com/intlify/vue-i18n/pull/2229
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-07-22T14:58:31Z/
url https://github.com/intlify/vue-i18n/pull/2229
5
reference_url https://github.com/intlify/vue-i18n/pull/2230
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-07-22T14:58:31Z/
url https://github.com/intlify/vue-i18n/pull/2230
6
reference_url https://github.com/intlify/vue-i18n/releases/tag/v10.0.8
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-07-22T14:58:31Z/
url https://github.com/intlify/vue-i18n/releases/tag/v10.0.8
7
reference_url https://github.com/intlify/vue-i18n/releases/tag/v11.1.10
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-07-22T14:58:31Z/
url https://github.com/intlify/vue-i18n/releases/tag/v11.1.10
8
reference_url https://github.com/intlify/vue-i18n/releases/tag/v9.14.5
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-07-22T14:58:31Z/
url https://github.com/intlify/vue-i18n/releases/tag/v9.14.5
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-53892
reference_id CVE-2025-53892
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-53892
10
reference_url https://github.com/advisories/GHSA-x8qp-wqqm-57ph
reference_id GHSA-x8qp-wqqm-57ph
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x8qp-wqqm-57ph
11
reference_url https://github.com/intlify/vue-i18n/security/advisories/GHSA-x8qp-wqqm-57ph
reference_id GHSA-x8qp-wqqm-57ph
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-07-22T14:58:31Z/
url https://github.com/intlify/vue-i18n/security/advisories/GHSA-x8qp-wqqm-57ph
fixed_packages
0
url pkg:npm/vue-i18n@11.1.10
purl pkg:npm/vue-i18n@11.1.10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/vue-i18n@11.1.10
1
url pkg:npm/vue-i18n@12.0.0-alpha.1
purl pkg:npm/vue-i18n@12.0.0-alpha.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/vue-i18n@12.0.0-alpha.1
aliases CVE-2025-53892, GHSA-x8qp-wqqm-57ph
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zhyn-mt8m-h7aw
1
url VCID-zu81-skzx-puc9
vulnerability_id VCID-zu81-skzx-puc9
summary 
Vue I18n Allows Prototype Pollution in `handleFlatJson`
**Vulnerability type:**
Prototype Pollution

**Vulnerability Location(s):**
```js
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-27597
reference_id
reference_type
scores
0
value 0.00181
scoring_system epss
scoring_elements 0.3947
published_at 2026-06-08T12:55:00Z
1
value 0.00181
scoring_system epss
scoring_elements 0.39484
published_at 2026-06-09T12:55:00Z
2
value 0.00181
scoring_system epss
scoring_elements 0.395
published_at 2026-06-07T12:55:00Z
3
value 0.00181
scoring_system epss
scoring_elements 0.39523
published_at 2026-06-05T12:55:00Z
4
value 0.00181
scoring_system epss
scoring_elements 0.39528
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-27597
1
reference_url https://github.com/intlify/vue-i18n
reference_id
reference_type
scores
0
value 8.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intlify/vue-i18n
2
reference_url https://github.com/intlify/vue-i18n/commit/4bb6eacda7fc2cde5687549afa0efb27ca40862a
reference_id
reference_type
scores
0
value 8.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-03-07T17:59:31Z/
url https://github.com/intlify/vue-i18n/commit/4bb6eacda7fc2cde5687549afa0efb27ca40862a
3
reference_url https://github.com/intlify/vue-i18n/commit/d21e06a7440eed8ada7f522b22fcf830b98d3a53
reference_id
reference_type
scores
0
value 8.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intlify/vue-i18n/commit/d21e06a7440eed8ada7f522b22fcf830b98d3a53
4
reference_url https://github.com/intlify/vue-i18n/commit/fbda9988d3ddd3a1a21740d506d2c183d6b6e36a
reference_id
reference_type
scores
0
value 8.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intlify/vue-i18n/commit/fbda9988d3ddd3a1a21740d506d2c183d6b6e36a
5
reference_url https://github.com/intlify/vue-i18n/commit/feaf13fcff427f2cb1d5ec8076e639506ba28f9e
reference_id
reference_type
scores
0
value 8.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intlify/vue-i18n/commit/feaf13fcff427f2cb1d5ec8076e639506ba28f9e
6
reference_url https://github.com/intlify/vue-i18n/releases/tag/v10.0.6
reference_id
reference_type
scores
0
value 8.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intlify/vue-i18n/releases/tag/v10.0.6
7
reference_url https://github.com/intlify/vue-i18n/releases/tag/v11.1.2
reference_id
reference_type
scores
0
value 8.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intlify/vue-i18n/releases/tag/v11.1.2
8
reference_url https://github.com/intlify/vue-i18n/releases/tag/v9.14.3
reference_id
reference_type
scores
0
value 8.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intlify/vue-i18n/releases/tag/v9.14.3
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-27597
reference_id CVE-2025-27597
reference_type
scores
0
value 8.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-27597
10
reference_url https://github.com/advisories/GHSA-p2ph-7g93-hw3m
reference_id GHSA-p2ph-7g93-hw3m
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-p2ph-7g93-hw3m
11
reference_url https://github.com/intlify/vue-i18n/security/advisories/GHSA-p2ph-7g93-hw3m
reference_id GHSA-p2ph-7g93-hw3m
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
1
value 8.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-03-07T17:59:31Z/
url https://github.com/intlify/vue-i18n/security/advisories/GHSA-p2ph-7g93-hw3m
fixed_packages
0
url pkg:npm/vue-i18n@11.1.2
purl pkg:npm/vue-i18n@11.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zhyn-mt8m-h7aw
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/vue-i18n@11.1.2
aliases CVE-2025-27597, GHSA-p2ph-7g93-hw3m
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zu81-skzx-puc9
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/vue-i18n@11.0.1