Locize vulnerabilities
We track 2 vulnerabilities in Locize products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 14, 2026.
2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score
Latest Locize vulnerabilities
- 8.3 High severity
gettext-converter: Improperly Controlled Modification of Object Prototype Attributes
gettext-converter provides gettext resource conversion utilities for JavaScript. Prior to 1.3.3, js2i18next() in lib/js2i18next.js splits nested translation keys using options.keyseparator, whose default value consists of two number signs, and uses each segmen
- 7.5 High severity
locize: Improper Neutralization of Input During Web Page Generation
locize is a localization platform that connects code and i18n setup. Prior to version 4.0.21, the locize client SDK registers a window.addEventListener("message", …) handler that dispatches to registered internal handlers (editKey, commitKey, commitKeys, isLoc