https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 15:11:33 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-08434 cnvd-2025-08434 https://cve.radiocsirt.org/vuln/cnvd-2025-08434 https://cve.radiocsirt.org/vuln/euvd-2026-158867 EUVD-2026-158867 https://cve.radiocsirt.org/vuln/euvd-2026-158867 https://cve.radiocsirt.org/vuln/fkie_cve-2024-43370 <p>gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting (XSS) injection if `.po` dictionary definition files are corrupted. This vulnerability has been patched in version 2.0.3. As a workaround, control the origin of the definition catalog to prevent the use of this flaw in the definition of plural forms.</p> <p>gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting (XSS) injection if `.po` dictionary definition files are corrupted. This vulnerability has been patched in version 2.0.3. As a workaround, control the origin of the definition catalog to prevent the use of this flaw in the definition of plural forms.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-43370 https://cve.radiocsirt.org/vuln/ghsa-vwhg-jwr4-vxgg <p><strong>Affected:</strong> npm: gettext.js</p> <p>### Impact Possible vulnerability to XSS injection if .po dictionary definition files is corrupted</p> <p>### Patches Update gettext.js to 2.0.3</p> <p>### Workarounds Make sure you control the origin of the definition catalog to prevent the use of this flaw in the definition of plural forms.</p> <p><strong>Affected:</strong> npm: gettext.js</p> <p>### Impact Possible vulnerability to XSS injection if .po dictionary definition files is corrupted</p> <p>### Patches Update gettext.js to 2.0.3</p> <p>### Workarounds Make sure you control the origin of the definition catalog to prevent the use of this flaw in the definition of plural forms.</p> https://cve.radiocsirt.org/vuln/ghsa-vwhg-jwr4-vxgg https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-43370 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: gettext.js, Ubuntu:20.04:LTS: gettext.js, Ubuntu:22.04:LTS: gettext.js, Ubuntu:24.04:LTS: gettext.js</p> <p>gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting (XSS) injection if `.po` dictionary definition files are corrupted. This vulnerability has been patched in version 2.0.3. As a workaround, control the origin of the definition catalog to prevent the use of this flaw in the definition of plural forms.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: gettext.js, Ubuntu:20.04:LTS: gettext.js, Ubuntu:22.04:LTS: gettext.js, Ubuntu:24.04:LTS: gettext.js</p> <p>gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting (XSS) injection if `.po` dictionary definition files are corrupted. This vulnerability has been patched in version 2.0.3. As a workaround, control the origin of the definition catalog to prevent the use of this flaw in the definition of plural forms.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-43370