CVE-2026-55451
1 advisory.
npm/gettext-converter CVE-2026-55451: medium, EPSS 0.57%
gettext-converter: Prototype pollution in js2i18next() via crafted translation keys
Action: Upgrade gettext-converter to 1.3.3 or later.
npm i gettext-converter@1.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.3 | - |
Fixed versions
| 1.3.3 |
Sources
- osv: GHSA-f4jp-rw7w-ccwg
- https://github.com/locize/gettext-converter/security/advisories/GHSA-f4jp-rw7w-ccwg
- https://github.com/locize/gettext-converter/issues/15
- https://github.com/locize/gettext-converter/commit/df90c3b93e51faef68891d97b626544f619c5b31
- https://github.com/locize/gettext-converter
- https://github.com/locize/gettext-converter/releases/tag/v1.3.3
CVE-2026-55451 · published · modified · JSON