Description
A Server-Side Request Forgery (SSRF) Vulnerability is present in applications utilizing the google-translate-api-browser package and exposing the translateOptions to the end user. An attacker can set a malicious tld, causing the application to return unsafe URLs pointing towards local resources.
Recommendation
Update the google-translate-api-browser package to the latest compatible version. Followings are version details:
- Affected version(s): < 4.1.0
- Patched version(s): 4.1.0
References
Could your website be exposed too?
SmartScanner can check your website for google-translate-api-browser Server-Side Request Forgery (SSRF) Vulnerability and gives you actionable findings to investigate.
Start a free scanRelated Issues
- lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability - CVE-2024-32964
- Server-Side Request Forgery (SSRF) in vriteio/vrite - CVE-2023-5572
- Nu Html Checker (vnu) contains a Server-Side Request Forgery (SSRF) vulnerability - CVE-2025-15104
- pdfmake is vulnerable to server-side request forgery (SSRF) - CVE-2026-26801
You might also like:
See something that needs correcting? Let us knowUpdated November 27, 2023