Skip to content

Product

debian/ruby-i18n vulnerabilities

4 published CVES affecting debian/ruby-i18n, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
4
Critical
0
High
1
Medium
1
Low
0
Unscored
2
CISA KEV
0

Latest debian/ruby-i18n CVEs

Newest publication first

  2. CVE-2014-10077 i18n Vulnerable to Denial of Service Attack

    Published
    HighCVSS 7.5 EPSS 3.4% PoC

    Hash#slice in lib/i18n/core_ext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where :some_key is present in keep_keys but not present in the hash.

  4. CVE-2013-4492 i18n gem Cross-site Scripting vulnerability

    Published
    MediumCVSS 4.3 EPSS 2.2% PoC

    Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.