High, CVSS 7.5NuGetPublished
Denial of Service in i18n
CVE-2020-7791 · GHSA-hfvc-g252-rp4g
- Affected
- NuGet i18n < 2.1.15
- Fixed in
- 2.1.15· Vendor fix available
- Issue
- This affects the package i18n before version 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs.
Recommended action: Upgrade to 2.1.15 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.