Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/i18next@1.7.3
Typenpm
Namespace
Namei18next
Version1.7.3
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.10.3
Latest_non_vulnerable_version3.4.4
Affected_by_vulnerabilities
0
url VCID-4wk7-9qya-5khm
vulnerability_id VCID-4wk7-9qya-5khm
summary Cross-Site Scripting in i18next
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-16008
reference_id
reference_type
scores
0
value 0.00223
scoring_system epss
scoring_elements 0.45273
published_at 2026-06-12T12:55:00Z
1
value 0.00223
scoring_system epss
scoring_elements 0.45124
published_at 2026-06-11T12:55:00Z
2
value 0.00223
scoring_system epss
scoring_elements 0.45286
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-16008
1
reference_url https://github.com/i18next/i18next/pull/443
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/i18next/i18next/pull/443
2
reference_url https://www.npmjs.com/advisories/325
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.npmjs.com/advisories/325
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-16008
reference_id CVE-2017-16008
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-16008
4
reference_url https://github.com/advisories/GHSA-f89g-whpf-6q9m
reference_id GHSA-f89g-whpf-6q9m
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-f89g-whpf-6q9m
fixed_packages
0
url pkg:npm/i18next@1.10.3
purl pkg:npm/i18next@1.10.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.10.3
aliases CVE-2017-16008, GHSA-f89g-whpf-6q9m
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4wk7-9qya-5khm
1
url VCID-huvu-7qt1-z3f7
vulnerability_id VCID-huvu-7qt1-z3f7
summary 
Cross-Site Scripting
Because of how the interpolation is implemented, making replacements from the dictionary one at a time, untrusted user input can use the name of one of the dictionary keys to inject script into the browser.
references
0
reference_url https://github.com/i18next/i18next/pull/443
reference_id
reference_type
scores
url https://github.com/i18next/i18next/pull/443
fixed_packages
0
url pkg:npm/i18next@1.10.3
purl pkg:npm/i18next@1.10.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.10.3
aliases GMS-2017-118
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-huvu-7qt1-z3f7
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.7.3