Skip to content

Vendor

i18n project vulnerabilities

3 published CVES affecting i18n project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
2
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of i18n project alerts

Products

Latest i18n project CVEs

Newest publication first

  1. CVE-2020-7791 Denial of Service (DoS)

    Published
    HighCVSS 7.5 EPSS 3.0%

    This affects the package i18n before 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs.

  2. CVE-2014-10077 i18n Vulnerable to Denial of Service Attack

    Published
    HighCVSS 7.5 EPSS 3.4% PoC

    Hash#slice in lib/i18n/core_ext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where :some_key is present in keep_keys but not present in the hash.

  3. CVE-2013-4492 i18n gem Cross-site Scripting vulnerability

    Published
    MediumCVSS 4.3 EPSS 2.2% PoC

    Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.