VDB
Sign up
HIGH7.5

GHSA-hfvc-g252-rp4g

Denial of Service in i18n

Quick fix

GHSA-hfvc-g252-rp4g — i18n: upgrade to the fixed version with the command below.

dotnet add package i18n --version 2.1.15

Details

This affects the package i18n before version 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs.

Are you affected?

Enter the version of the package you're using.

Affected packages

NuGet/i18n
Introduced in: 0Fixed in: 2.1.15
Fixdotnet add package i18n --version 2.1.15

References