Skip to content
OpenAdvisories

Vendor

locize

3 known vulnerabilities.

Products

i18next-locize-backend 1 gettext-converter 1 locize 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2026-55451

    gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

    gettext-converter provides gettext resource conversion utilities for JavaScript. Prior to 1.3.3, js2i18next() in lib/js2i18next.js splits nested translation keys using options.keyseparator, whose default value consists of two number signs, and uses each segme…

    locize gettext-converter gettext-converter npm
  • High 7.5
    CVE-2026-41886

    locize Client SDK: Cross-origin DOM XSS & Handler Hijack Through Missing e.origin Validation in InContext Editor

    locize is a localization platform that connects code and i18n setup. Prior to version 4.0.21, the locize client SDK registers a window.addEventListener("message", …) handler that dispatches to registered internal handlers (editKey, commitKey, commitKeys, isLo…

    locize locize locize npm