CVE-2026-118256

The Vue I18n internationalization plugin for Vue.js (versions 9.0.0-beta.5 through 11.4.13 and 12.0.0-alpha.4 ) contains a vulnerability in the Legacy API's escapeParameterHtml function. When escapeParameter is enabled, the escapeParams() function fails to escape named interpolation values if the...