amannn/next-intl Security Advisories | GitStock

medium2026-05-06

next-intl has prototype pollution with `experimental.messages.precompile` via attacker-controlled translation catalog keys

GHSA-4c35-wcg5-mm9h

low2026-05-06

mcp-data-vis vulnerable to denial of service via unsanitized `select` key lookup on `Object.prototype` with `precompile: true`

GHSA-r27j-894h-3w3p

medium2026-04-10

next-intl has an open redirect vulnerability

GHSA-8f24-v5vv-gm5j · CVE-2026-40299