GHSA-97gv-3p2c-xw7jHighCVSS 8.2

Denial of Service and Content Injection in i18n-node-angular

Published
February 18, 2019
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2016-10524 →

📋 Description

Versions of i18n-node-angular prior to 1.4.0 are affected by denial of service and cross-site scripting vulnerabilities. The vulnerabilities exist in a REST endpoint that was created for development purposes, but was not disabled in production in affected versions.

Recommendation

Update to version 1.4.0 or later.

🎯 Affected products1

  • npm/i18n-node-angular:< 1.4.0

🔗 References (4)