VYPR

npm package

translate

pkg:npm/translate

Vulnerabilities (1)

  • CVE-2024-29042Mar 22, 2024
    affected < 3.0.0fixed 3.0.0

    Translate is a package that allows users to convert text to different languages on Node.js and the browser. Prior to version 3.0.0, an attacker controlling the second variable of the `translate` function is able to perform a cache poisoning attack. They can change the outcome of