Search for packages
| purl | pkg:deb/debian/ruby-i18n@0.6.9-1~bpo70%2B1 |
| Next non-vulnerable version | 1.5.3-1+deb10u1 |
| Latest non-vulnerable version | 1.5.3-1+deb10u1 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-65ha-wgr4-eqd4
Aliases: CVE-2013-4492 GHSA-r5hc-9xx5-97rw |
Reflective XSS Vulnerability When a translation is missing, the HTML exception message raised does not escape the keys. Under certain common configurations this string can contain user input which would allow an attacker to execute a reflective XSS attack. |
Affected by 1 other vulnerability. |
|
VCID-sns8-17hs-vugu
Aliases: CVE-2014-10077 GHSA-34hf-g744-jw64 |
Improper Input Validation `Hash#slice` in `lib/i18n/core_ext/hash.rb` in the i18n gem for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where `:some_key` is present in `keep_keys` but not present in the hash. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||