14 matches found
CVE-2025-27597
Vue I18n is the internationalization plugin for Vue.js. @intlify/message-resolver and @intlify/vue-i18n-core are vulnerable to Prototype Pollution through the entry function: handleFlatJson. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the...
CVE-2025-27597
Vue I18n is the internationalization plugin for Vue.js. @intlify/message-resolver and @intlify/vue-i18n-core are vulnerable to Prototype Pollution through the entry function: handleFlatJson. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the...
@_lan/uni-libs (0.0.3), @aosweb/osui (>=0.0.23, <=0.0.25) +311 more potentially affected by CVE-2025-27597 via @intlify/message-resolver (>=9.1.0, <=9.1.10)
@intlify/message-resolver NPM version =9.1.0, =0.0.23, =1.0.0, =0.1.87, =0.3.0, =0.0.0, =0.12.0, =1.6.0, =1.1.0, =0.0.1, =3.0.0-3060520221121001, =3.0.0-4020320240708001, =3.0.0-alpha-5030120260930001 and more Source cves: CVE-2025-27597 Source advisory: OSV:GHSA-P2PH-7G93-HW3M...
@acegroup/cli-templates-vue3-element-admin (1.0.0), @actindo/core-ui (>=0.0.12, <=0.0.75) +405 more potentially affected by CVE-2025-27597 via vue-i18n (>=9.1.0, <=9.14.2)
vue-i18n NPM version =9.1.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.0-next.5436b378dff7e64898bb7046afa2d5d574255b54, =0.0.0-next.0d1cf82f9dfbe1d3e7ec5644f85f97a43c8c2334, =0.7.0-beta.15, =0.7.0-beta.15, =0.0.23, =0.0.6-alpha-2.5, =0.1.87, =0.0.1-beta.1, =1.6.4, =1.6.6 and more Source cves:...
@dv.net/docs-vitepress-openapi (>=1.0.7, <=1.0.8), @emahuni/directus.distilled-app-internals (>=1.1.2-app-13.7.1, <=13.7.1-1.1.0) +33 more potentially affected by CVE-2025-27597 via vue-i18n (>=11.0.0, <=11.1.1)
vue-i18n NPM version =11.0.0, =1.0.7, =1.1.2-app-13.7.1, =0.0.1, =0.0.1, =0.0.1, =0.2.550, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.15.0 and more Source cves: CVE-2025-27597 Source advisory: OSV:GHSA-P2PH-7G93-HW3M...
@_lan/uni-libs (0.0.3), @aosweb/osui (>=0.0.23, <=0.0.25) +307 more potentially affected by CVE-2025-27597 via @intlify/core-base (>=9.1.0, <=9.1.10)
@intlify/core-base NPM version =9.1.0, =0.0.23, =1.0.0, =0.1.87, =0.3.0, =0.0.0, =0.12.0, =1.6.0, =1.1.0, =0.0.1, =3.0.0-3060520221121001, =3.0.0-4020320240708001, =3.0.0-alpha-5030120260930001 and more Source cves: CVE-2025-27597 Source advisory: OSV:GHSA-P2PH-7G93-HW3M...
@acegroup/cli-templates-vue3-element-admin (1.0.0), @actindo/core-ui (>=0.0.12, <=0.0.75) +405 more potentially affected by CVE-2025-27597 via vue-i18n (>=9.1.0, <=9.14.2)
vue-i18n NPM version =9.1.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.0-next.5436b378dff7e64898bb7046afa2d5d574255b54, =0.0.0-next.0d1cf82f9dfbe1d3e7ec5644f85f97a43c8c2334, =0.7.0-beta.15, =0.7.0-beta.15, =0.0.23, =0.0.6-alpha-2.5, =0.1.87, =0.0.1-beta.1, =1.6.4, =1.6.6 and more Source cves:...
@_lan/uni-libs (0.0.3), @aosweb/osui (>=0.0.23, <=0.0.25) +307 more potentially affected by CVE-2025-27597 via @intlify/core-base (>=9.1.0, <=9.1.10)
@intlify/core-base NPM version =9.1.0, =0.0.23, =1.0.0, =0.1.87, =0.3.0, =0.0.0, =0.12.0, =1.6.0, =1.1.0, =0.0.1, =3.0.0-3060520221121001, =3.0.0-4020320240708001, =3.0.0-alpha-5030120260930001 and more Source cves: CVE-2025-27597 Source advisory: MEND:CVE-2025-27597...
@_lan/uni-libs (0.0.3), @aosweb/osui (>=0.0.23, <=0.0.25) +311 more potentially affected by CVE-2025-27597 via @intlify/message-resolver (>=9.1.0, <=9.1.10)
@intlify/message-resolver NPM version =9.1.0, =0.0.23, =1.0.0, =0.1.87, =0.3.0, =0.0.0, =0.12.0, =1.6.0, =1.1.0, =0.0.1, =3.0.0-3060520221121001, =3.0.0-4020320240708001, =3.0.0-alpha-5030120260930001 and more Source cves: CVE-2025-27597 Source advisory: MEND:CVE-2025-27597...
CVE-2025-27597
CVE-2025-27597 affects Vue I18n: the vulnerable components are @intlify/message-resolver and @intlify/vue-i18n-core. The handleFlatJson entry point allows prototype pollution via payloads that modify Object.prototype, enabling DoS and potentially enabling remote code execution if polluted propert...
CVE-2025-27597 Vue I18n Prototype Pollution in `handleFlatJson`
Vue I18n is the internationalization plugin for Vue.js. @intlify/message-resolver and @intlify/vue-i18n-core are vulnerable to Prototype Pollution through the entry function: handleFlatJson. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the...
@dv.net/docs-vitepress-openapi (>=1.0.7, <=1.0.8), @emahuni/directus.distilled-app-internals (>=1.1.2-app-13.7.1, <=13.7.1-1.1.0) +33 more potentially affected by CVE-2025-27597 via vue-i18n (>=11.0.0, <=11.1.1)
vue-i18n NPM version =11.0.0, =1.0.7, =1.1.2-app-13.7.1, =0.0.1, =0.0.1, =0.0.1, =0.2.550, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.15.0 and more Source cves: CVE-2025-27597 Source advisory: MEND:CVE-2025-27597...
CVE-2025-27597 Vue I18n Prototype Pollution in `handleFlatJson`
Vue I18n is the internationalization plugin for Vue.js. @intlify/message-resolver and @intlify/vue-i18n-core are vulnerable to Prototype Pollution through the entry function: handleFlatJson. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the...
CVE-2025-27597 Vue I18n Prototype Pollution in `handleFlatJson`
Vue I18n is the internationalization plugin for Vue.js. @intlify/message-resolver and @intlify/vue-i18n-core are vulnerable to Prototype Pollution through the entry function: handleFlatJson. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the...