I18Next Node Module
Approved changes feed: RSS · Atom
cpe:2.3:a:hackerone:i18next_node_module:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hackerone (9b72fff1-532f-502a-8030-14fc4a21dd17) |
|---|---|
| Product | I18Next Node Module (da3998bb-8bcf-58a7-92e2-1fd9d5c19d16) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-16010 |
vulnerable | 2026-06-08 05:08:59.866023 |
Details available
i18next is a language translation framework. When using the .init method, passing interpolation options without passing an escapeValue will default to undefined rather than the assumed true. This can result in a cross-site scripting vulnerability because user input is assumed to be escaped, but is not. This vulnerability affects i18next 2.0.0 and later.
Published: 2018-05-29T20:00:00.000Z
Updated: 2024-09-16T18:38:55.446Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16008 |
vulnerable | 2026-06-08 05:08:59.862829 |
Details available
i18next is a language translation framework. Because of how the interpolation is implemented, making replacements from the dictionary one at a time, untrusted user input can use the name of one of the dictionary keys to inject script into the browser. This affects i18next <=1.10.2.
Published: 2018-06-04T19:00:00.000Z
Updated: 2024-09-16T17:53:16.453Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.