Most recent entries from all

EUVD-2026-200862

fkie_cve-2024-21528

All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations() function in gettext.js due to improper user input sanitization.

GHSA-g974-hxvm-x689 — node-gettext vulnerable to Prototype Pollution

Affected: npm: node-gettext

All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations() function in gettext.js due to improper user input sanitization.

gsd-2024-21528

RHSA-2025:1824 — Red Hat Security Advisory: RHODF-4.17-RHEL-9 security update

PostCSS: Improper input validation in PostCSS node-gettext: Prototype Pollution golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html k8s.io/kubernetes: kubelet: node denial of service via kubelet checkpoint API