Skip to content
OpenAdvisories

Package · Debian

gettext.js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.2
    CVE-2024-43370

    gettext.js vulnerable to cross-site scripting (XSS)

    gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting (XSS) injection if `.po` dictionary definition files are corrupted. This vulnerability has been patched in version 2.0.3. As a workaround, control the origin of the def…

    guillaumepotier gettext.js gettext.js gettext.js Debian Ubuntu npm