CVE-2024-21528 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-21528 Interim 1 1 2025-02-18T00:30:41Z current 2025-02-18T00:30:41Z 2025-02-18T00:30:41Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-21528 All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations() function in gettext.js due to improper user input sanitization. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2025-February/038434.html E-Mail link for SUSE-RU-2025:0523-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 branch-network-formula-0.1.1728559936.c16d4fb-150600.3.3.3 cobbler-3.3.3-150600.5.11.3 locale-formula-0.4.0-150600.3.3.3 pxe-formula-0.3.0-150600.3.3.3 python3-spacewalk-client-tools-5.0.8-150600.4.6.3 release-notes-susemanager-5.0.3-150600.11.24.1 release-notes-susemanager-proxy-5.0.3-150600.11.20.1 saltboot-formula-0.1.1728559936.c16d4fb-150600.3.3.3 spacecmd-5.0.11-150600.4.9.3 spacewalk-backend-5.0.11-150600.4.9.5 spacewalk-backend-app-5.0.11-150600.4.9.5 spacewalk-backend-iss-5.0.11-150600.4.9.5 spacewalk-backend-iss-export-5.0.11-150600.4.9.5 spacewalk-backend-package-push-server-5.0.11-150600.4.9.5 spacewalk-backend-server-5.0.11-150600.4.9.5 spacewalk-backend-sql-5.0.11-150600.4.9.5 spacewalk-backend-sql-postgresql-5.0.11-150600.4.9.5 spacewalk-backend-tools-5.0.11-150600.4.9.5 spacewalk-backend-xml-export-libs-5.0.11-150600.4.9.5 spacewalk-backend-xmlrpc-5.0.11-150600.4.9.5 spacewalk-base-5.0.16-150600.3.13.5 spacewalk-base-minimal-5.0.16-150600.3.13.5 spacewalk-base-minimal-config-5.0.16-150600.3.13.5 spacewalk-client-tools-5.0.8-150600.4.6.3 spacewalk-config-5.0.5-150600.3.6.3 spacewalk-html-5.0.16-150600.3.13.5 spacewalk-java-5.0.19-150600.3.14.4 spacewalk-java-config-5.0.19-150600.3.14.4 spacewalk-java-lib-5.0.19-150600.3.14.4 spacewalk-java-postgresql-5.0.19-150600.3.14.4 spacewalk-proxy-broker-5.0.5-150600.3.6.3 spacewalk-proxy-common-5.0.5-150600.3.6.3 spacewalk-proxy-package-manager-5.0.5-150600.3.6.3 spacewalk-proxy-redirect-5.0.5-150600.3.6.3 spacewalk-search-5.0.3-150600.3.3.3 spacewalk-setup-5.0.7-150600.3.6.3 spacewalk-taskomatic-5.0.19-150600.3.14.4 spacewalk-utils-5.0.6-150600.3.6.3 supportutils-plugin-salt-1.2.3-150600.4.3.3 supportutils-plugin-susemanager-5.0.5-150600.3.6.3 susemanager-5.0.11-150600.3.9.3 susemanager-build-keys-15.5.3-150600.5.6.3 susemanager-build-keys-web-15.5.3-150600.5.6.3 susemanager-docs_en-5.0.3-150600.11.9.3 susemanager-docs_en-pdf-5.0.3-150600.11.9.3 susemanager-schema-5.0.13-150600.3.9.3 susemanager-schema-utility-5.0.13-150600.3.9.3 susemanager-sls-5.0.12-150600.3.9.3 susemanager-sync-data-5.0.9-150600.3.11.3 susemanager-tools-5.0.11-150600.3.9.3 uyuni-coco-attestation-core-5.0.6-150600.3.6.3 uyuni-coco-attestation-module-secureboot-5.0.6-150600.3.6.3 uyuni-coco-attestation-module-snpguest-5.0.6-150600.3.6.3 uyuni-config-modules-5.0.12-150600.3.9.3 uyuni-java-common-5.0.6-150600.3.6.3 woodstox-4.4.2-150600.3.3.3 python3-spacewalk-client-tools-5.0.8-150600.4.6.3 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 release-notes-susemanager-proxy-5.0.3-150600.11.20.1 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 spacewalk-backend-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 spacewalk-client-tools-5.0.8-150600.4.6.3 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 spacewalk-proxy-broker-5.0.5-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 spacewalk-proxy-common-5.0.5-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 spacewalk-proxy-package-manager-5.0.5-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 spacewalk-proxy-redirect-5.0.5-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 uyuni-coco-attestation-core-5.0.6-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3 uyuni-coco-attestation-module-secureboot-5.0.6-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3 uyuni-coco-attestation-module-snpguest-5.0.6-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3 uyuni-java-common-5.0.6-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3 branch-network-formula-0.1.1728559936.c16d4fb-150600.3.3.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 cobbler-3.3.3-150600.5.11.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 locale-formula-0.4.0-150600.3.3.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 pxe-formula-0.3.0-150600.3.3.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 python3-spacewalk-client-tools-5.0.8-150600.4.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 release-notes-susemanager-5.0.3-150600.11.24.1 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 saltboot-formula-0.1.1728559936.c16d4fb-150600.3.3.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacecmd-5.0.11-150600.4.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-app-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-iss-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-iss-export-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-package-push-server-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-server-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-sql-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-sql-postgresql-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-tools-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-xml-export-libs-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-xmlrpc-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-base-5.0.16-150600.3.13.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-base-minimal-5.0.16-150600.3.13.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-base-minimal-config-5.0.16-150600.3.13.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-client-tools-5.0.8-150600.4.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-config-5.0.5-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-html-5.0.16-150600.3.13.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-java-5.0.19-150600.3.14.4 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-java-config-5.0.19-150600.3.14.4 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-java-lib-5.0.19-150600.3.14.4 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-java-postgresql-5.0.19-150600.3.14.4 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-search-5.0.3-150600.3.3.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-setup-5.0.7-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-taskomatic-5.0.19-150600.3.14.4 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-utils-5.0.6-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 supportutils-plugin-salt-1.2.3-150600.4.3.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 supportutils-plugin-susemanager-5.0.5-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-5.0.11-150600.3.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-build-keys-15.5.3-150600.5.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-build-keys-web-15.5.3-150600.5.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-docs_en-5.0.3-150600.11.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-docs_en-pdf-5.0.3-150600.11.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-schema-5.0.13-150600.3.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-schema-utility-5.0.13-150600.3.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-sls-5.0.12-150600.3.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-sync-data-5.0.9-150600.3.11.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-tools-5.0.11-150600.3.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 uyuni-config-modules-5.0.12-150600.3.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 woodstox-4.4.2-150600.3.3.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations() function in gettext.js due to improper user input sanitization. CVE-2024-21528 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:python3-spacewalk-client-tools-5.0.8-150600.4.6.3 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:release-notes-susemanager-proxy-5.0.3-150600.11.20.1 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:spacewalk-backend-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:spacewalk-client-tools-5.0.8-150600.4.6.3 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:spacewalk-proxy-broker-5.0.5-150600.3.6.3 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:spacewalk-proxy-common-5.0.5-150600.3.6.3 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:spacewalk-proxy-package-manager-5.0.5-150600.3.6.3 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:spacewalk-proxy-redirect-5.0.5-150600.3.6.3 Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3:uyuni-coco-attestation-core-5.0.6-150600.3.6.3 Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3:uyuni-coco-attestation-module-secureboot-5.0.6-150600.3.6.3 Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3:uyuni-coco-attestation-module-snpguest-5.0.6-150600.3.6.3 Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3:uyuni-java-common-5.0.6-150600.3.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:branch-network-formula-0.1.1728559936.c16d4fb-150600.3.3.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:cobbler-3.3.3-150600.5.11.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:locale-formula-0.4.0-150600.3.3.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:pxe-formula-0.3.0-150600.3.3.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:python3-spacewalk-client-tools-5.0.8-150600.4.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:release-notes-susemanager-5.0.3-150600.11.24.1 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:saltboot-formula-0.1.1728559936.c16d4fb-150600.3.3.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacecmd-5.0.11-150600.4.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-app-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-iss-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-iss-export-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-package-push-server-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-server-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-sql-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-sql-postgresql-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-tools-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-xml-export-libs-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-xmlrpc-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-base-5.0.16-150600.3.13.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-base-minimal-5.0.16-150600.3.13.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-base-minimal-config-5.0.16-150600.3.13.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-client-tools-5.0.8-150600.4.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-config-5.0.5-150600.3.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-html-5.0.16-150600.3.13.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-java-5.0.19-150600.3.14.4 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-java-config-5.0.19-150600.3.14.4 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-java-lib-5.0.19-150600.3.14.4 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-java-postgresql-5.0.19-150600.3.14.4 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-search-5.0.3-150600.3.3.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-setup-5.0.7-150600.3.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-taskomatic-5.0.19-150600.3.14.4 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-utils-5.0.6-150600.3.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:supportutils-plugin-salt-1.2.3-150600.4.3.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:supportutils-plugin-susemanager-5.0.5-150600.3.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-5.0.11-150600.3.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-build-keys-15.5.3-150600.5.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-build-keys-web-15.5.3-150600.5.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-docs_en-5.0.3-150600.11.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-docs_en-pdf-5.0.3-150600.11.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-schema-5.0.13-150600.3.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-schema-utility-5.0.13-150600.3.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-sls-5.0.12-150600.3.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-sync-data-5.0.9-150600.3.11.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-tools-5.0.11-150600.3.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:uyuni-config-modules-5.0.12-150600.3.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:woodstox-4.4.2-150600.3.3.3 moderate