Vulnerabilities

TI-2026-40016 CVE-2026-55451 · GHSA-f4jp-rw7w-ccwg

gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

HIGH 75

gettext-converter provides gettext resource conversion utilities for JavaScript.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00566 Published 2026-09-14 Partial fix · 1.3.3 CWE-1321

TI-2026-30289 CVE-2026-41886 · GHSA-w937-fg2h-xhq2

LOW 32

locize is a localization platform that connects code and i18n setup.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00101 Published 2026-05-08 Fixed in 4.0.21 CWE-346

TI-2026-30288 CVE-2026-41885 · GHSA-mgcp-mfp8-3q45

LOW 28

i18next-locize-backend is a simple i18next backend for locize.com which can be used in Node.js, in the browser and for Deno.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00224 Published 2026-05-08 Fixed in 9.0.2 CWE-22