PT-2024-18942 · Unknown · Node-Gettext

Name of the Vulnerable Software and Affected Versions: node-gettext versions all Description: The issue is related to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization. This affects the node-gettext package. Recommendations: For all version...

Prototype Pollution

node-gettext is vulnerable to Prototype Pollution. The vulnerability is due to improper user input sanitization in the addTranslations function, allowing attackers to inject or manipulate properties in object prototypes...