gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-55451 · Microsoft / collected KEV context

EUVD-2026-77634

GHSA-f4jp-rw7w-ccwg

cve-program · CVE-2026-55451

• https://github.com/locize/gettext-converter/security/advisories/GHSA-f4jp-rw7w-ccwg
• https://github.com/locize/gettext-converter/issues/15
• https://github.com/locize/gettext-converter/commit/df90c3b93e51faef68891d97b626544f619c5b31
• https://github.com/locize/gettext-converter/releases/tag/v1.3.3

euvd · EUVD-2026-77634

• https://github.com/locize/gettext-converter/security/advisories/GHSA-f4jp-rw7w-ccwg
• https://github.com/locize/gettext-converter/issues/15
• https://github.com/locize/gettext-converter/commit/df90c3b93e51faef68891d97b626544f619c5b31
• https://github.com/locize/gettext-converter/releases/tag/v1.3.3

nvd · CVE-2026-55451

• https://github.com/locize/gettext-converter/commit/df90c3b93e51faef68891d97b626544f619c5b31
• https://github.com/locize/gettext-converter/issues/15
• https://github.com/locize/gettext-converter/releases/tag/v1.3.3
• https://github.com/locize/gettext-converter/security/advisories/GHSA-f4jp-rw7w-ccwg

osv · GHSA-f4jp-rw7w-ccwg

• https://github.com/locize/gettext-converter/security/advisories/GHSA-f4jp-rw7w-ccwg
• https://github.com/locize/gettext-converter/issues/15
• https://github.com/locize/gettext-converter/commit/df90c3b93e51faef68891d97b626544f619c5b31
• https://github.com/locize/gettext-converter
• https://github.com/locize/gettext-converter/releases/tag/v1.3.3

No related operational record is retained in the current change model.