CVE-2026-118257

The Vue I18n internationalization plugin for Vue.js is vulnerable to Cross-Site Scripting (XSS) in versions 11.1.10 through 11.4.14, 12.0.0-alpha.4 through 12.0.0-alpha.5, and legacy versions 9.14.5 and 10.0.8. The root cause is that the sanitizeTranslatedHtml() function escapes markup within an ...