Vulnerabilities in locize

3 results

CVE-2026-55451HIGHgettext-converter: Prototype pollution in js2i18next() via crafted translation keysEPSS 0.6%CVE-2026-41885MEDIUMPath traversal / URL injection via unsanitised lng/ns/projectId/version in i18next-locize-backendEPSS 0.2%CVE-2026-41886HIGHlocize Client SDK: Cross-origin DOM XSS & Handler Hijack Through Missing e.origin Validation in InContext EditorEPSS 0.1%