59 matches found
3h1-ui (>=1.0.46, <=3.0.0-next.266), 3t-ui (>=0.0.7, <=0.0.9) +2643 more potentially affected by CVE-2025-53892 +1 more via @intlify/core-base (>=9.0.0-beta.13, <=11.4.13)
@intlify/core-base NPM version =9.0.0-beta.13, =1.0.46, =0.0.7, =0.5.0, =0.0.0, =0.0.0, =0.1.9, =0.0.292, =0.0.292, =0.0.237, =2.0.0-dev.838f140, =3.0.1, =0.1.0, =1.0.5 - @lan/uni-libs 0.0.3 and more Source cves: CVE-2025-53892, CVE-2026-118256 Source advisory: GHSA-8RC2-428Q-7WW3...
@intlify/core (>=12.0.0-alpha.1, <=12.0.0-alpha.4), @intlify/devtools-types (>=12.0.0-alpha.1, <=12.0.0-alpha.4) +7 more potentially affected by CVE-2026-118256 via @intlify/core-base (>=12.0.0-alpha.1, <=12.0.0-alpha.4)
@intlify/core-base NPM version =12.0.0-alpha.1, =12.0.0-alpha.1, =12.0.0-alpha.1, =12.0.0-alpha.1, =1.0.3, =12.0.0-alpha.1, =12.0.0-alpha.1, =0.0.5, =0.1.1, =0.1.8 Source cves: CVE-2026-118256 Source advisory: OSV:GHSA-8RC2-428Q-7WW3...
Improper Encoding or Escaping of Output
Overview @intlify/core-base is a @intlify/core-base Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the escapeParams function in packages/core-base/src/translate.ts, when a translation call passes both list and named interpolation values...
3h1-ui (>=1.0.46, <=3.0.0-next.266), 3t-ui (>=0.0.7, <=0.0.9) +2643 more potentially affected by CVE-2026-118256 via @intlify/core-base (>=9.0.0-beta.13, <=11.4.13)
@intlify/core-base NPM version =9.0.0-beta.13, =1.0.46, =0.0.7, =0.5.0, =0.0.0, =0.0.0, =0.1.9, =0.0.292, =0.0.292, =0.0.237, =2.0.0-dev.838f140, =3.0.1, =0.1.0, =1.0.5 - @lan/uni-libs 0.0.3 and more Source cves: CVE-2026-118256 Source advisory: OSV:GHSA-8RC2-428Q-7WW3...
@intlify/core (>=12.0.0-alpha.1, <=12.0.0-alpha.4), @intlify/devtools-types (>=12.0.0-alpha.1, <=12.0.0-alpha.4) +7 more potentially affected by CVE-2025-53892 +1 more via @intlify/core-base (>=12.0.0-alpha.1, <=12.0.0-alpha.4)
@intlify/core-base NPM version =12.0.0-alpha.1, =12.0.0-alpha.1, =12.0.0-alpha.1, =12.0.0-alpha.1, =1.0.3, =12.0.0-alpha.1, =12.0.0-alpha.1, =0.0.5, =0.1.1, =0.1.8 Source cves: CVE-2025-53892, CVE-2026-118256 Source advisory: GHSA-8RC2-428Q-7WW3...
3h1-ui (>=1.0.46, <=3.0.0-next.266), 3t-ui (>=0.0.7, <=0.0.9) +1758 more potentially affected by CVE-2025-53892 +1 more via @intlify/core-base (9.14.5)
@intlify/core-base NPM version 9.14.5 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/core-base and may be impacted: - 3h1-ui =1.0.46, =0.0.7, =0.5.0, =0.0.0, =0.0.0, =0.1.9, =0.0.292, =0.0.292, =0.0.237, =2.0.0-dev.838f140, =3.0.1, =0.1.0,...
Improper Encoding or Escaping of Output
Overview @intlify/core-base is a @intlify/core-base Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the sanitizeTranslatedHtml function in packages/shared/src/sanitize.ts, which fails to neutralize srcdoc attributes in translation messages. An...
3h1-ui (>=1.0.46, <=3.0.0-next.266), 3t-ui (>=0.0.7, <=0.0.9) +1758 more potentially affected by CVE-2025-53892 +1 more via @intlify/core-base (9.14.5)
@intlify/core-base NPM version 9.14.5 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/core-base and may be impacted: - 3h1-ui =1.0.46, =0.0.7, =0.5.0, =0.0.0, =0.0.0, =0.1.9, =0.0.292, =0.0.292, =0.0.237, =2.0.0-dev.838f140, =3.0.1, =0.1.0,...
@intlify/core (12.0.0-alpha.4), @intlify/devtools-types (12.0.0-alpha.4) +3 more potentially affected by CVE-2025-53892 +1 more via @intlify/core-base (12.0.0-alpha.4)
@intlify/core-base NPM version 12.0.0-alpha.4 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/core-base and may be impacted: - @intlify/core 12.0.0-alpha.4 - @intlify/devtools-types 12.0.0-alpha.4 - @intlify/vue-i18n-core 12.0.0-alpha.4 -...
@actindo/core-ui (>=1.0.21, <=1.0.28), @actindo/datahub (>=0.0.5, <=0.0.7) +137 more potentially affected by CVE-2025-53892 +1 more via @intlify/core-base (>=11.1.10, <=11.4.13)
@intlify/core-base NPM version =11.1.10, =1.0.21, =0.0.5, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.2.0, =0.1.0, =10.2.2, =11.3.0-depup.0, =1.0.1, =2.2.0-app-13.13.1, =0.3.0-alpha.2, =0.5.0-alpha.1 and more Source cves: CVE-2025-53892, CVE-2026-118257 Source advisory: GHSA-83RM-6C8R-G728...
@intlify/core (12.0.0-alpha.4), @intlify/core-base (12.0.0-alpha.4) +5 more potentially affected by CVE-2025-53892 +1 more via @intlify/shared (12.0.0-alpha.4)
@intlify/shared NPM version 12.0.0-alpha.4 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/shared and may be impacted: - @intlify/core 12.0.0-alpha.4 - @intlify/core-base 12.0.0-alpha.4 - @intlify/devtools-types 12.0.0-alpha.4 -...
@actindo/core-ui (>=1.0.21, <=1.0.28), @actindo/datahub (>=0.0.5, <=0.0.7) +137 more potentially affected by CVE-2025-53892 +1 more via @intlify/core-base (>=11.1.10, <=11.4.13)
@intlify/core-base NPM version =11.1.10, =1.0.21, =0.0.5, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.2.0, =0.1.0, =10.2.2, =11.3.0-depup.0, =1.0.1, =2.2.0-app-13.13.1, =0.3.0-alpha.2, =0.5.0-alpha.1 and more Source cves: CVE-2025-53892, CVE-2026-118257 Source advisory: OSV:GHSA-83RM-6C8R-G728...
@intlify/core (12.0.0-alpha.4), @intlify/devtools-types (12.0.0-alpha.4) +3 more potentially affected by CVE-2025-53892 +1 more via @intlify/core-base (12.0.0-alpha.4)
@intlify/core-base NPM version 12.0.0-alpha.4 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/core-base and may be impacted: - @intlify/core 12.0.0-alpha.4 - @intlify/devtools-types 12.0.0-alpha.4 - @intlify/vue-i18n-core 12.0.0-alpha.4 -...
@aerogel/vite (>=0.1.2-next.0605c9e96ea4993e09b4b2b14c6968a9c1c4f952, <=0.1.2-next.f48050171752b1e3da51f312a4ebf58bba710f60), @airlenet/vben-vite-config (5.5.6) +342 more potentially affected by CVE-2025-53892 +1 more via @intlify/core-base (10.0.8)
@intlify/core-base NPM version 10.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/core-base and may be impacted: - @aerogel/vite =0.1.2-next.0605c9e96ea4993e09b4b2b14c6968a9c1c4f952, =0.8.16, =0.8.16, =0.0.10, =0.1.17, =0.0.1, =1.0.16,...
@aerogel/vite (>=0.1.2-next.0605c9e96ea4993e09b4b2b14c6968a9c1c4f952, <=0.1.2-next.f48050171752b1e3da51f312a4ebf58bba710f60), @airlenet/vben-vite-config (5.5.6) +342 more potentially affected by CVE-2025-53892 +1 more via @intlify/core-base (10.0.8)
@intlify/core-base NPM version 10.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/core-base and may be impacted: - @aerogel/vite =0.1.2-next.0605c9e96ea4993e09b4b2b14c6968a9c1c4f952, =0.8.16, =0.8.16, =0.0.10, =0.1.17, =0.0.1, =1.0.16,...
@intlify/core (12.0.0-alpha.4), @intlify/devtools-types (12.0.0-alpha.4) +3 more potentially affected by CVE-2026-118257 via @intlify/core-base (12.0.0-alpha.4)
@intlify/core-base NPM version 12.0.0-alpha.4 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/core-base and may be impacted: - @intlify/core 12.0.0-alpha.4 - @intlify/devtools-types 12.0.0-alpha.4 - @intlify/vue-i18n-core 12.0.0-alpha.4 -...
@actindo/core-ui (>=1.0.21, <=1.0.28), @actindo/datahub (>=0.0.5, <=0.0.7) +137 more potentially affected by CVE-2026-118257 via @intlify/core-base (>=11.1.10, <=11.4.13)
@intlify/core-base NPM version =11.1.10, =1.0.21, =0.0.5, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.2.0, =0.1.0, =10.2.2, =11.3.0-depup.0, =1.0.1, =2.2.0-app-13.13.1, =0.3.0-alpha.2, =0.5.0-alpha.1 and more Source cves: CVE-2026-118257 Source advisory: MEND:CVE-2026-118257...
@intlify/core (>=12.0.0-alpha.1, <=12.0.0-alpha.4), @intlify/devtools-types (>=12.0.0-alpha.1, <=12.0.0-alpha.4) +7 more potentially affected by CVE-2026-118256 via @intlify/core-base (>=12.0.0-alpha.1, <=12.0.0-alpha.4)
@intlify/core-base NPM version =12.0.0-alpha.1, =12.0.0-alpha.1, =12.0.0-alpha.1, =12.0.0-alpha.1, =1.0.3, =12.0.0-alpha.1, =12.0.0-alpha.1, =0.0.5, =0.1.1, =0.1.8 Source cves: CVE-2026-118256 Source advisory: MEND:CVE-2026-118256...
@acronis-platform/ui-component-library (1.33.0), @actindo/core-ui (>=1.0.1, <=1.0.28) +481 more potentially affected by CVE-2026-118256 via @intlify/core-base (>=10.0.0-alpha.1, <=11.4.13)
@intlify/core-base NPM version =10.0.0-alpha.1, =1.0.1, =0.0.5, =0.0.1, =0.0.1, =0.1.2-next.0605c9e96ea4993e09b4b2b14c6968a9c1c4f952, =1.0.0, =0.8.16, =0.8.16, =0.0.10, =0.1.17, =1.0.0, =0.0.1, =0.4.1 - @brdgm/brdgm-commons 1.6.9 and more Source cves: CVE-2026-118256 Source advisory:...
