i18n-node-angular@1.2.1 vulnerabilities

express routes for i18n-node-angular

Direct Vulnerabilities

Known vulnerabilities in the i18n-node-angular package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Denial of Service (DoS)

A REST API /i18n/:locale/:phrase endpoint was accessible in production environment, allowing to add previously unknown translation literals to the translation files. This feature can be abused to mount a XSS attack via content injection, or a Denial of Service attack by exhausting storage resources on the server.

How to fix Denial of Service (DoS)?

Upgrade i18n-node-angular to version 1.4.0 or greater.

If a direct dependency update is not possible, use snyk wizard to patch this vulnerability.

<1.4.0
  • H
Denial of Service (DoS)

A REST API /i18n/:locale/:phrase endpoint was accessible in production environment, allowing to add previously unknown translation literals to the translation files. This feature can be abused to mount a XSS attack via content injection, or a Denial of Service attack by exhausting storage resources on the server.

How to fix Denial of Service (DoS)?

Upgrade i18n-node-angular to version 1.4.0 or greater.

If a direct dependency update is not possible, use snyk wizard to patch this vulnerability.

<1.4.0