openjsf messageformat vulnerabilities (CVE)

CVE records published for openjsf messageformat, newest first. Follow to get an email when a new one appears.

1 results

7.5High

CVE-2025-57349 1 year ago

openjsf messageformat

The messageformat package, an implementation of the Unicode MessageFormat 2 specification for JavaScript, is vulnerable to prototype pollution due to improper handling of message key paths in versions prior to 2.3.0. The flaw arises when processing nested mes…