unstale

npm / next-intl

next-intl

What changed in next-intl 4, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-24.

2 security3 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli on npm

next-intl 45 changes

Security 2

  • next-intl has prototype pollution with experimental.messages.precompile via attacker-controlled translation catalog keys

    4.9.2security advisory

  • next-intl has an open redirect vulnerability

    4.9.1security advisory

Fixes and other changes 3

  • Improvements for useExtracted; the notes do not specify further details.

    4.14.9release notes

  • Messages on the same line now keep source order.

    4.14.8release notes

  • Adds an optional peer dependency to support global virtual stores of package managers.

    4.14.7release notes