CVE-2024-43370
1 advisory.
npm/gettext.js CVE-2024-43370: high 7.2, EPSS 0.38%
gettext.js has a Cross-site Scripting injection
Action: Upgrade gettext.js to 2.0.3 or later.
npm i gettext.js@2.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.3 | - |
Fixed versions
| 2.0.3 |
Sources
- osv: GHSA-vwhg-jwr4-vxgg
- https://github.com/guillaumepotier/gettext.js/security/advisories/GHSA-vwhg-jwr4-vxgg
- https://nvd.nist.gov/vuln/detail/CVE-2024-43370
- https://github.com/guillaumepotier/gettext.js/commit/8150aeba833183e14c2291a8a148b8f79d1d68d8
- https://github.com/guillaumepotier/gettext.js
CVE-2024-43370 · published · modified · JSON