Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/ruby-i18n@1.10.0-2?distro=trixie
purl pkg:deb/debian/ruby-i18n@1.10.0-2?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-65ha-wgr4-eqd4 Reflective XSS Vulnerability When a translation is missing, the HTML exception message raised does not escape the keys. Under certain common configurations this string can contain user input which would allow an attacker to execute a reflective XSS attack. CVE-2013-4492
GHSA-r5hc-9xx5-97rw
VCID-sns8-17hs-vugu Improper Input Validation `Hash#slice` in `lib/i18n/core_ext/hash.rb` in the i18n gem for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where `:some_key` is present in `keep_keys` but not present in the hash. CVE-2014-10077
GHSA-34hf-g744-jw64

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T13:08:43.792359+00:00 Debian Importer Fixing VCID-65ha-wgr4-eqd4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:44:30.726355+00:00 Debian Importer Fixing VCID-sns8-17hs-vugu https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T09:02:32.975924+00:00 Debian Importer Fixing VCID-65ha-wgr4-eqd4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:15:50.044837+00:00 Debian Importer Fixing VCID-sns8-17hs-vugu https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:52:16.315672+00:00 Debian Importer Fixing VCID-sns8-17hs-vugu https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:52:16.268539+00:00 Debian Importer Fixing VCID-65ha-wgr4-eqd4 https://security-tracker.debian.org/tracker/data/json 38.1.0