Search for packages
| purl | pkg:nuget/i18n@1.0.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-p4mn-btwb-q7cm
Aliases: CVE-2020-7791 GHSA-hfvc-g252-rp4g |
Denial of Service in i18n This affects the package i18n before version 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-65ha-wgr4-eqd4 | Reflective XSS Vulnerability When a translation is missing, the HTML exception message raised does not escape the keys. Under certain common configurations this string can contain user input which would allow an attacker to execute a reflective XSS attack. |
CVE-2013-4492
GHSA-r5hc-9xx5-97rw |
| VCID-sns8-17hs-vugu | Improper Input Validation `Hash#slice` in `lib/i18n/core_ext/hash.rb` in the i18n gem for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where `:some_key` is present in `keep_keys` but not present in the hash. |
CVE-2014-10077
GHSA-34hf-g744-jw64 |