Skip to content
OpenAdvisories

Package · Debian

node-i18next

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.9

    i18next: Shared built-in corruption through inherited-key deepExtend recursion

    i18next is an internationalization framework for JavaScript. Prior to version 26.3.4, `deepExtend` in `src/utils.js` checks property existence with the in operator and recurses into inherited built-ins reached through `Object.prototype`. An application must e…