Skip to content
OpenAdvisories

Package · Debian

ruby-i18n

2 known vulnerabilities.

2 results · Feed

  • High 7.5

    i18n Vulnerable to Denial of Service Attack

    Hash#slice in lib/i18n/core_ext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where :some_key is present in keep_keys but not present in the hash.

  • Medium —

    i18n gem Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call.