5.9 Medium

CVE-2024-21528 All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations() function in…

Description

All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations() function in gettext.js due to improper user input sanitization.

Affected products and versions

Product	Affected versions	Fixed in
node-gettext	Versions not published

Do you use node-gettext?

Track this CVE Watch node-gettext Check my SBOMs

www.cveye.io/en/cve/CVE-2024-21528

Timeline

Published September 10, 2024
Last modified November 12, 2024

References

security.snyk.io security.snyk.io
github.com github.com

Track this CVE