https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T15:41:21.607002+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-08434 cnvd-2025-08434 2026-10-27T15:41:21.610185+00:00 cnvd-2025-08434 https://cve.radiocsirt.org/vuln/euvd-2026-158867 EUVD-2026-158867 2026-10-27T15:41:21.610225+00:00 EUVD-2026-158867 https://cve.radiocsirt.org/vuln/fkie_cve-2024-43370 fkie_cve-2024-43370 2026-10-27T15:41:21.610247+00:00

gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting (XSS) injection if `.po` dictionary definition files are corrupted. This vulnerability has been patched in version 2.0.3. As a workaround, control the origin of the definition catalog to prevent the use of this flaw in the definition of plural forms.

 https://cve.radiocsirt.org/vuln/ghsa-vwhg-jwr4-vxgg GHSA-vwhg-jwr4-vxgg — gettext.js has a Cross-site Scripting injection 2026-10-27T15:41:21.610298+00:00

Affected: npm: gettext.js

### Impact Possible vulnerability to XSS injection if .po dictionary definition files is corrupted

### Patches Update gettext.js to 2.0.3

### Workarounds Make sure you control the origin of the definition catalog to prevent the use of this flaw in the definition of plural forms.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-43370 UBUNTU-CVE-2024-43370 2026-10-27T15:41:21.610325+00:00

Affected: Ubuntu:18.04:LTS: gettext.js, Ubuntu:20.04:LTS: gettext.js, Ubuntu:22.04:LTS: gettext.js, Ubuntu:24.04:LTS: gettext.js

gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting (XSS) injection if `.po` dictionary definition files are corrupted. This vulnerability has been patched in version 2.0.3. As a workaround, control the origin of the definition catalog to prevent the use of this flaw in the definition of plural forms.