Description
This affects the package i18n before 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| snykCNA (assigner) | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Modified | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 3.0% · top 13% of all CVEs (6 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Weakness
- Denial of Service (DoS)
Affected products
i18n
- affected unspecified – < 2.1.15
Affected packages
From reviewed advisories of the GitHub Advisory Database.
References (12)
- https://snyk.io/vuln/SNYK-DOTNET-I18N-1050179 (opens in a new tab)x_refsource_MISCx_transferred
- https://github.com/turquoiseowl/i18n/issues/387 (opens in a new tab)x_refsource_MISCx_transferred
- https://github.com/turquoiseowl/i18n/commit/c418e3345313dc896c1951d8c46ab0b9b12fcbd3 (opens in a new tab)x_refsource_MISCx_transferred
- [myfaces-dev] 20210506 [GitHub] [myfaces-tobago] lofwyr14 opened a new pull request #821: build: CVE fix (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- [druid-commits] 20210506 [GitHub] [druid] jihoonson commented on a change in pull request #11215: Suppressing false positive CVE-2020-7791 (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- [druid-commits] 20210506 [GitHub] [druid] maytasm opened a new pull request #11215: Suppressing false positive CVE-2020-7791 (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- [druid-commits] 20210506 [GitHub] [druid] maytasm merged pull request #11215: Suppressing false positive CVE-2020-7791 (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- [druid-commits] 20210506 [GitHub] [druid] maytasm commented on a change in pull request #11215: Suppressing false positive CVE-2020-7791 (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- [druid-commits] 20210506 [GitHub] [druid] clintropolis opened a new pull request #11217: [Backport] Suppressing false positive CVE-2020-7791 (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- [druid-commits] 20210507 [GitHub] [druid] clintropolis commented on pull request #11217: [Backport] Suppressing false positive CVE-2020-7791 (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- [druid-commits] 20210507 [GitHub] [druid] clintropolis merged pull request #11217: [Backport] Suppressing false positive CVE-2020-7791 (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- [druid-commits] 20210507 [druid] branch 0.21.1 updated: Suppressing false positive CVE-2020-7791 (#11215) (#11217) (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisory GHSA-hfvc-g252-rp4g (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2020-7791)Record last updated .