guillaumepotier/gettext.js

guillaumepotier/gettext.js

GitHubGitHub
GitHubgithub.com
guillaumepotier.github.ioguillaumepotier.github.io
Releases24
Frequency5 months 2 days
Last Release
Stars165
gettext.js is a lightweight yet complete and accurate GNU gettext port for node and the browser.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-43370↗
7.2 HIGH—

gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting (XSS) injection if `.po` dictionary definition files are corrupted. This vulnerability has been patched in version 2.0.3. As a workaround, control the origin of the definition catalog to prevent the use of this flaw in the definition of plural forms.