What is the severity of REDHAT-BUG-2311014?

The vulnerability REDHAT-BUG-2311014 is classified as a moderate severity issue.

How do I fix REDHAT-BUG-2311014?

To remediate REDHAT-BUG-2311014, update the node-gettext package to the latest version that includes the patch.

What are the potential impacts of REDHAT-BUG-2311014?

The impacts of REDHAT-BUG-2311014 include the risk of prototype pollution, which can lead to arbitrary code execution or application behavior manipulation.

Which software versions are affected by REDHAT-BUG-2311014?

All versions of the node-gettext package are affected by the vulnerability REDHAT-BUG-2311014.

What component of node-gettext is vulnerable in REDHAT-BUG-2311014?

The addTranslations() function in gettext.js is the component vulnerable to prototype pollution in REDHAT-BUG-2311014.

Vulnerability/
REDHAT-BUG-2311014

medium

10/9/2024

26/2/2025

REDHAT-BUG-2311014

First published: Tue Sep 10 2024(Updated: )

All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations() function in gettext.js due to improper user input sanitization.

Affected Software	Affected Version	How to fix
gettext	<=

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of REDHAT-BUG-2311014?
The vulnerability REDHAT-BUG-2311014 is classified as a moderate severity issue.
How do I fix REDHAT-BUG-2311014?
To remediate REDHAT-BUG-2311014, update the node-gettext package to the latest version that includes the patch.
What are the potential impacts of REDHAT-BUG-2311014?
The impacts of REDHAT-BUG-2311014 include the risk of prototype pollution, which can lead to arbitrary code execution or application behavior manipulation.
Which software versions are affected by REDHAT-BUG-2311014?
All versions of the node-gettext package are affected by the vulnerability REDHAT-BUG-2311014.
What component of node-gettext is vulnerable in REDHAT-BUG-2311014?
The addTranslations() function in gettext.js is the component vulnerable to prototype pollution in REDHAT-BUG-2311014.

agent/first-publish-date
agent/references
agent/last-modified-date
agent/severity
agent/source
agent/type
agent/description
agent/event
agent/guess-ai
agent/software-canonical-lookup
agent/softwarecombine
agent/tags
collector/redhat-bugzilla
source/Red Hat
alias/CVE-2024-21528
vendor/nodegettext
canonical/gettext

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of REDHAT-BUG-2311014?
The vulnerability REDHAT-BUG-2311014 is classified as a moderate severity issue.
How do I fix REDHAT-BUG-2311014?
To remediate REDHAT-BUG-2311014, update the node-gettext package to the latest version that includes the patch.
What are the potential impacts of REDHAT-BUG-2311014?
The impacts of REDHAT-BUG-2311014 include the risk of prototype pollution, which can lead to arbitrary code execution or application behavior manipulation.
Which software versions are affected by REDHAT-BUG-2311014?
All versions of the node-gettext package are affected by the vulnerability REDHAT-BUG-2311014.
What component of node-gettext is vulnerable in REDHAT-BUG-2311014?
The addTranslations() function in gettext.js is the component vulnerable to prototype pollution in REDHAT-BUG-2311014.