CVE-2026-118257

A flaw was found in vue-i18n. The HTML sanitization mechanism fails to properly neutralize inline frame iframe srcdoc attributes when processing translated content. A remote attacker could exploit this vulnerability by injecting malicious parameters or translation data into applications configure...