HIGH7.5npm
GHSA-w937-fg2h-xhq2· CVE-2026-41886locize Client SDK: Cross-origin DOM XSS & Handler Hijack Through Missing e.origin Validation in InContext Editor
Modified: 5/13/2026
package
npm/locize
pkg:npm/locize
package
pkg:npm/locize
locize Client SDK: Cross-origin DOM XSS & Handler Hijack Through Missing e.origin Validation in InContext Editor
Modified: 5/13/2026