GitHub Advisoryadvisory · NuGet

GHSA-hfvc-g252-rp4g Denial of Service in i18n

HIGH Published 2020-12-14 Modified 2022-09-08 Official page ↗
Aliases
CVE-2020-7791
Ecosystem
NuGet
Packages
i18n
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-20, CWE-400
Reviewed
2020-12-14

Affected packages

• NuGet i18n: < 2.1.15 → fixed in 2.1.15

Description

This affects the package i18n before version 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs.

Related

Alias · CVE (1)

  • CVE-2020-7791 This affects the package i18n before 2.1.15. vulnerability

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-400 Uncontrolled Resource Consumption weakness

References