GitHub Advisoryadvisory · npm

GHSA-97gv-3p2c-xw7j Denial of Service and Content Injection in i18n-node-angular

HIGH Published 2019-02-18 Modified 2022-02-11 Official page ↗
Aliases
CVE-2016-10524
Ecosystem
npm
Packages
i18n-node-angular
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H
Weaknesses
CWE-400, CWE-74
Reviewed
2020-06-16

Affected packages

• npm i18n-node-angular: < 1.4.0 → fixed in 1.4.0

Description

Versions of `i18n-node-angular` prior to 1.4.0 are affected by denial of service and cross-site scripting vulnerabilities. The vulnerabilities exist in a REST endpoint that was created for development purposes, but was not disabled in production in affected versions. Recommendation Update to version 1.4.0 or later.

Related

Alias · CVE (1)

  • CVE-2016-10524 i18n-node-angular is a module used to interact between i18n and angular without using additional resources. vulnerability

Weakness · CWE (2)

  • CWE-400 Uncontrolled Resource Consumption weakness
  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References