{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/362017?format=json","vulnerability_id":"VCID-huvu-7qt1-z3f7","summary":"Cross-Site Scripting\nBecause of how the interpolation is implemented, making replacements from the dictionary one at a time, untrusted user input can use the name of one of the dictionary keys to inject script into the browser.","aliases":[{"alias":"GMS-2017-118"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/14475?format=json","purl":"pkg:npm/i18next@1.10.3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.10.3"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/413099?format=json","purl":"pkg:npm/i18next@0.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@0.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/413100?format=json","purl":"pkg:npm/i18next@0.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@0.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/413101?format=json","purl":"pkg:npm/i18next@0.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@0.5.1"},{"url":"http://public2.vulnerablecode.io/api/packages/413102?format=json","purl":"pkg:npm/i18next@0.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@0.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/413103?format=json","purl":"pkg:npm/i18next@1.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/413104?format=json","purl":"pkg:npm/i18next@1.2.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.2.1"},{"url":"http://public2.vulnerablecode.io/api/packages/413105?format=json","purl":"pkg:npm/i18next@1.2.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.2.2"},{"url":"http://public2.vulnerablecode.io/api/packages/413106?format=json","purl":"pkg:npm/i18next@1.2.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.2.3"},{"url":"http://public2.vulnerablecode.io/api/packages/413107?format=json","purl":"pkg:npm/i18next@1.2.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.2.4"},{"url":"http://public2.vulnerablecode.io/api/packages/413108?format=json","purl":"pkg:npm/i18next@1.2.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.2.5"},{"url":"http://public2.vulnerablecode.io/api/packages/413109?format=json","purl":"pkg:npm/i18next@1.3.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.3.1"},{"url":"http://public2.vulnerablecode.io/api/packages/413110?format=json","purl":"pkg:npm/i18next@1.3.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.3.2"},{"url":"http://public2.vulnerablecode.io/api/packages/413111?format=json","purl":"pkg:npm/i18next@1.3.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.3.3"},{"url":"http://public2.vulnerablecode.io/api/packages/413112?format=json","purl":"pkg:npm/i18next@1.3.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.3.4"},{"url":"http://public2.vulnerablecode.io/api/packages/413113?format=json","purl":"pkg:npm/i18next@1.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/413114?format=json","purl":"pkg:npm/i18next@1.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.4.1"},{"url":"http://public2.vulnerablecode.io/api/packages/413115?format=json","purl":"pkg:npm/i18next@1.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/413116?format=json","purl":"pkg:npm/i18next@1.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.5.5"},{"url":"http://public2.vulnerablecode.io/api/packages/413117?format=json","purl":"pkg:npm/i18next@1.5.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.5.6"},{"url":"http://public2.vulnerablecode.io/api/packages/413118?format=json","purl":"pkg:npm/i18next@1.5.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.5.7"},{"url":"http://public2.vulnerablecode.io/api/packages/413119?format=json","purl":"pkg:npm/i18next@1.5.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.5.8"},{"url":"http://public2.vulnerablecode.io/api/packages/413120?format=json","purl":"pkg:npm/i18next@1.5.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.5.9"},{"url":"http://public2.vulnerablecode.io/api/packages/413121?format=json","purl":"pkg:npm/i18next@1.5.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.5.10"},{"url":"http://public2.vulnerablecode.io/api/packages/413122?format=json","purl":"pkg:npm/i18next@1.5.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.5.11"},{"url":"http://public2.vulnerablecode.io/api/packages/413123?format=json","purl":"pkg:npm/i18next@1.5.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.5.12"},{"url":"http://public2.vulnerablecode.io/api/packages/413124?format=json","purl":"pkg:npm/i18next@1.5.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.5.13"},{"url":"http://public2.vulnerablecode.io/api/packages/413125?format=json","purl":"pkg:npm/i18next@1.5.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.5.14"},{"url":"http://public2.vulnerablecode.io/api/packages/413126?format=json","purl":"pkg:npm/i18next@1.5.15","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.5.15"},{"url":"http://public2.vulnerablecode.io/api/packages/413127?format=json","purl":"pkg:npm/i18next@1.5.16","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.5.16"},{"url":"http://public2.vulnerablecode.io/api/packages/413128?format=json","purl":"pkg:npm/i18next@1.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/413129?format=json","purl":"pkg:npm/i18next@1.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/413130?format=json","purl":"pkg:npm/i18next@1.6.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.6.2"},{"url":"http://public2.vulnerablecode.io/api/packages/413131?format=json","purl":"pkg:npm/i18next@1.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/413132?format=json","purl":"pkg:npm/i18next@1.6.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.6.4"},{"url":"http://public2.vulnerablecode.io/api/packages/413133?format=json","purl":"pkg:npm/i18next@1.6.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.6.5"},{"url":"http://public2.vulnerablecode.io/api/packages/413134?format=json","purl":"pkg:npm/i18next@1.6.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.6.6"},{"url":"http://public2.vulnerablecode.io/api/packages/413135?format=json","purl":"pkg:npm/i18next@1.6.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.6.7"},{"url":"http://public2.vulnerablecode.io/api/packages/413136?format=json","purl":"pkg:npm/i18next@1.6.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.6.8"},{"url":"http://public2.vulnerablecode.io/api/packages/413137?format=json","purl":"pkg:npm/i18next@1.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.7.0"},{"url":"http://public2.vulnerablecode.io/api/packages/413138?format=json","purl":"pkg:npm/i18next@1.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.7.1"},{"url":"http://public2.vulnerablecode.io/api/packages/413139?format=json","purl":"pkg:npm/i18next@1.7.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.7.3"},{"url":"http://public2.vulnerablecode.io/api/packages/413140?format=json","purl":"pkg:npm/i18next@1.7.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.7.4"},{"url":"http://public2.vulnerablecode.io/api/packages/413141?format=json","purl":"pkg:npm/i18next@1.7.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.7.6"},{"url":"http://public2.vulnerablecode.io/api/packages/413142?format=json","purl":"pkg:npm/i18next@1.7.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.7.8"},{"url":"http://public2.vulnerablecode.io/api/packages/413143?format=json","purl":"pkg:npm/i18next@1.7.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.7.9"},{"url":"http://public2.vulnerablecode.io/api/packages/413144?format=json","purl":"pkg:npm/i18next@1.7.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.7.10"},{"url":"http://public2.vulnerablecode.io/api/packages/413145?format=json","purl":"pkg:npm/i18next@1.9.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.9.0"},{"url":"http://public2.vulnerablecode.io/api/packages/413146?format=json","purl":"pkg:npm/i18next@1.10.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.10.0"},{"url":"http://public2.vulnerablecode.io/api/packages/413147?format=json","purl":"pkg:npm/i18next@1.10.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.10.1"},{"url":"http://public2.vulnerablecode.io/api/packages/14474?format=json","purl":"pkg:npm/i18next@1.10.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4wk7-9qya-5khm"},{"vulnerability":"VCID-huvu-7qt1-z3f7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/i18next@1.10.2"}],"references":[{"reference_url":"https://github.com/i18next/i18next/pull/443","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/i18next/i18next/pull/443"}],"weaknesses":[{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."}],"exploits":[],"severity_range_score":null,"exploitability":"0.5","weighted_severity":"0.0","risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-huvu-7qt1-z3f7"}