npm/next-intl: medium 4.2
next-intl has prototype pollution with `experimental.messages.precompile` via attacker-controlled translation catalog keys
Action: Upgrade next-intl to 4.9.2 or later.
npm i next-intl@4.9.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.9.2 | - |
Fixed versions
| 4.9.2 |
Sources
- osv: GHSA-4c35-wcg5-mm9h
- https://github.com/amannn/next-intl/security/advisories/GHSA-4c35-wcg5-mm9h
- https://github.com/amannn/next-intl
published · modified · JSON