LO
Vendor
locize
3
CVEs
0
On KEV
0
New 30D
Products
GE8.3
gettext-converter
locize
1 CVEs0 on KEV0 new
I16.5
i18next-locize-backend
locize
1 CVEs0 on KEV0 new
LO7.5
locize
locize
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-55451 | GE gettext-converter locize | 8.3 | Sep 14 | gettext-converter: Prototype pollution in js2i18next() via crafted translation keys |
| CVE-2026-41886 | LO locize locize | 7.5 | May 8 | locize Client SDK: Cross-origin DOM XSS & Handler Hijack Through Missing e.origin Validation in InContext Editor |
| CVE-2026-41885 | I1 i18next-locize-backend locize | 6.5 | May 8 | Path traversal / URL injection via unsanitised lng/ns/projectId/version in i18next-locize-backend |