{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-04T15:37:32.005","vulnerabilities":[{"cve":{"id":"CVE-2024-43370","sourceIdentifier":"security-advisories@github.com","published":"2024-08-16T02:15:17.487","lastModified":"2026-06-17T07:50:54.177","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting (XSS) injection if `.po` dictionary definition files are corrupted. This vulnerability has been patched in version 2.0.3. As a workaround, control the origin of the definition catalog to prevent the use of this flaw in the definition of plural forms."},{"lang":"es","value":"gettext.js es un puerto gettext de GNU para el nodo y el navegador. Hay una inyección de Cross Site Scripting (XSS) si los archivos de definición del diccionario `.po` están dañados. Esta vulnerabilidad ha sido parcheada en la versión 2.0.3. Como solución alternativa, controle el origen del catálogo de definiciones para evitar el uso de este defecto en la definición de formas plurales."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"guillaumepotier","product":"gettext.js","versions":[{"version":"< 2.0.3","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-16T15:10:02.984428Z","id":"CVE-2024-43370","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"references":[{"url":"https://github.com/guillaumepotier/gettext.js/commit/8150aeba833183e14c2291a8a148b8f79d1d68d8","source":"security-advisories@github.com"},{"url":"https://github.com/guillaumepotier/gettext.js/security/advisories/GHSA-vwhg-jwr4-vxgg","source":"security-advisories@github.com"}]}}]}