Skip to content
OpenAdvisories

Product · HackerOne

i18next node module

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2017-16008

    Cross-Site Scripting in i18next

    i18next is a language translation framework. Because of how the interpolation is implemented, making replacements from the dictionary one at a time, untrusted user input can use the name of one of the dictionary keys to inject script into the browser. This af…

    HackerOne i18next node module i18next npm
  • Medium 6.1
    CVE-2017-16010

    Cross-Site Scripting in i18next

    i18next is a language translation framework. When using the .init method, passing interpolation options without passing an escapeValue will default to undefined rather than the assumed true. This can result in a cross-site scripting vulnerability because user…

    HackerOne i18next node module i18next npm