486 matches found
RHSA-2020:2846 Red Hat Security Advisory: gettext security update
Bulletin has no description...
RHSA-2020:2485 Red Hat Security Advisory: gettext security update
Bulletin has no description...
RHSA-2019:3643 Red Hat Security Advisory: gettext security update
Bulletin has no description...
RHSA-2020:1138 Red Hat Security Advisory: gettext security and bug fix update
Bulletin has no description...
GHSA-G974-HXVM-X689 node-gettext vulnerable to Prototype Pollution
All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...
node-gettext vulnerable to Prototype Pollution
All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...
CVE-2024-21528
A flaw was found in node-gettext. All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization. Mitigation Mitigation for this issue is either not available or the currently available options ...
CVE-2024-21528
All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...
CVE-2024-21528
All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...
CVE-2024-21528
All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...
node-gettext 安全漏洞
node-gettext is a JavaScript implementation of gettext, a localization framework open-sourced by Alexander Wallin. A security vulnerability exists in node-gettext, which stems from improper cleaning of user input and may be contaminated by prototypes via the addTranslations function in gettext.js...
CVE-2024-21528: Improperly Controlled Modification of Object Prototype Attributes
All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...
PT-2024-18942 · Unknown · Node-Gettext
Name of the Vulnerable Software and Affected Versions: node-gettext versions all Description: The issue is related to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization. This affects the node-gettext package. Recommendations: For all version...
Prototype Pollution
node-gettext is vulnerable to Prototype Pollution. The vulnerability is due to improper user input sanitization in the addTranslations function, allowing attackers to inject or manipulate properties in object prototypes...
GNU gettext cross-site scripting vulnerability
GNU gettext is an open source package for writing multilingual programs from the GNU community in the United States. A cross-site scripting vulnerability exists in GNU gettext, which stems from the application's lack of effective filtering and escaping of user-supplied data, and for which no...
CVE-2024-43370
gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting XSS injection if .po dictionary definition files are corrupted. This vulnerability has been patched in version 2.0.3. As a workaround, control the origin of the definition catalog to prevent the use of this...
GNU gettext 安全漏洞
GNU gettext is an open source package for writing multilingual programs from the GNU community in the United States. A cross-site scripting vulnerability exists in GNU gettext, which stems from the application's lack of effective filtering and escaping of user-supplied data, and for which no...
CVE-2024-43370
gettext.js is a GNU gettext port for Node and browsers. The CVE-2024-43370 vulnerability is a cross-site scripting (XSS) vulnerability triggered when .po dictionary files are corrupted. The issue has been fixed in version 2.0.3. A workaround is to control the origin of the dictionary catalog to p...
CVE-2024-43370 gettext.js vulnerable to cross-site scripting (XSS)
gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting XSS injection if .po dictionary definition files are corrupted. This vulnerability has been patched in version 2.0.3. As a workaround, control the origin of the definition catalog to prevent the use of this...