starsofchance/CVEfixes_v1.0.8 huggingface dataset:
CVE-2024-34062 (published 2024-05-03T10:15Z)

tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing arbitrary code execution. This issue is only locally exploitable and had been addressed in release version 4.66.3. All users are advised to upgrade. There are no known workarounds for this vulnerability.


Weakness information:
cwe_id: NVD-CWE-noinfo
cwe_name: Insufficient Information
description: There is insufficient information about the issue to classify it; details are unkown or unspecified.
extended_description: Insufficient Information

Fix information:
repo_url: https://github.com/tqdm/tqdm
commit_details: repo_url: https://github.com/tqdm/tqdm
author: Casper da Costa-Luis
author_date: 2024-05-02 22:35:59+01:00
msg: Merge pull request from GHSA-g7vv-2v7x-gj9p

cli: eval safety
repository: repo_url: https://github.com/tqdm/tqdm
repo_name: tqdm/tqdm
description: :zap: A Fast, Extensible Progress Bar for Python and CLI
repo_language: Python
owner: tqdm
CVE-2023-1625 (published 2023-09-24T01:15Z)

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.

CVSS v3 base score: 5.0, MEDIUM (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N)

Weakness information:
cwe_id: NVD-CWE-noinfo
cwe_name: Insufficient Information
description: There is insufficient information about the issue to classify it; details are unkown or unspecified.
extended_description: Insufficient Information

Fix information:
repo_url: https://github.com/openstack/heat
commit_details: repo_url: https://github.com/openstack/heat
author: Zuul
author_date: 2023-01-27 17:30:30+00:00
msg: Merge "Honor 'hidden' parameter in 'stack environment show' command"
repository: repo_url: https://github.com/openstack/heat
repo_name: openstack/heat
description: OpenStack Orchestration (Heat). Mirror of code maintained at opendev.org.
repo_language: Python
owner: openstack
CVE-2013-3081 (published 2014-06-09T19:55Z)

SQL injection vulnerability in the checkEmailFormat function in plugins/jojo_core/classes/Jojo.php in Jojo before 1.2.2 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header to /articles/test/.

Severity: HIGH
CVSS v2 base score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Weakness information:
cwe_id: CWE-89
cwe_name: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
description: The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
extended_description: 
            
            
         
         

Fix information:
repo_url: https://github.com/JojoCMS/Jojo-CMS
commit_details: repo_url: https://github.com/JojoCMS/Jojo-CMS
author: Harvey Kane
author_date: 2013-05-07 11:09:47+12:00
msg: Fix SQL injection issue CVE-2013-3081
repository: repo_url: https://github.com/JojoCMS/Jojo-CMS
repo_name: JojoCMS/Jojo-CMS
description: Jojo is an SEO-friendly, fast, and extensible PHP-based CMS
repo_language: PHP
owner: JojoCMS
file_changes: filename: Jojo.php
change_type: ModificationType.MODIFY
diff: @@ -2461,14 +2461,18 @@ class Jojo {
     /* Gets the IP address of the visitor, bypassing proxies */
     static function getIp()
     {
+        $ip = false;
         if ( (getenv('HTTP_X_FORWARDED_FOR') != '') && (strtolower(getenv('HTTP_X_FORWARDED_FOR')) != 'unknown')) {
             $iparray = explode(',', getenv('HTTP_X_FORWARDED_FOR'));
-            return $iparray[0];
+            $ip = $iparray[0];
         } elseif (getenv('REMOTE_ADDR') != '') {
-            return getenv('REMOTE_ADDR');
-        } else {
-            return false;
+            $ip = getenv('REMOTE_ADDR');
         }
+        /* check IP is valid format */
+        if (preg_match('/\\b(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\b/', $ip)) {
+        	return $ip;
+        }
+        return false;
     }
 
     /* reads the user agent string and gives the browser type - quick and simple detection */

programming_language: PHP
CVE-2023-28631 (published 2023-03-28T21:15Z)

comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. A Comrak AST can be constructed manually by a program instead of parsing a Markdown document with `parse_document`. This AST can then be converted to HTML via `html::format_document_with_plugins`. However, the HTML formatting code assumes that the AST is well-formed. For example, many AST notes contain `[u8]` fields which the formatting code assumes is valid UTF-8 data. Several bugs can be triggered if this is not the case. Version 0.17.0 contains adjustments to the AST, storing strings instead of unvalidated byte arrays. Users are advised to upgrade. Users unable to upgrade may manually validate UTF-8 correctness of all data when assigning to `&[u8]` and `Vec<u8>` fields in the AST. This issue is also tracked as `GHSL-2023-049`.

CVSS v3 base score: 9.8, CRITICAL (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Weakness information:
cwe_id: CWE-755
cwe_name: Improper Handling of Exceptional Conditions
description: The product does not handle or incorrectly handles an exceptional condition.
extended_description: 
            
         
         

Fix information:
repo_url: https://github.com/kivikakk/comrak
commit_details: repo_url: https://github.com/kivikakk/comrak
author: Asherah Connor
author_date: 2023-03-28 11:03:48+11:00
msg: Merge pull request from GHSA-5r3x-p7xx-x6q5

store/expose String in AST, not Vec<u8>
repository: repo_url: https://github.com/kivikakk/comrak
repo_name: kivikakk/comrak
description: CommonMark + GFM compatible Markdown parser and renderer
repo_language: Rust
owner: kivikakk
CVE-2018-11597 (published 2018-05-31T16:29Z)

Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing because of a missing check for stack exhaustion with many '{' characters in jsparse.c.

Severity: MEDIUM
CVSS v2 base score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)
CVSS v3 base score: 5.5, MEDIUM (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

Weakness information:
cwe_id: CWE-674
cwe_name: Uncontrolled Recursion
description: The product does not properly control the amount of recursion that takes place,  consuming excessive resources, such as allocated memory or the program stack.
extended_description: 
        
      
      

Fix information:
repo_url: https://github.com/espruino/Espruino
commit_details: repo_url: https://github.com/espruino/Espruino
author: Gordon Williams
author_date: 2018-05-28 09:06:06+01:00
msg: Fix stack overflow if interpreting a file full of '{' (fix #1448)
repository: repo_url: https://github.com/espruino/Espruino
repo_name: espruino/Espruino
description: The Espruino JavaScript interpreter - Official Repo
repo_language: C
owner: espruino
file_changes: filename: ChangeLog
change_type: ModificationType.MODIFY
diff: @@ -8,6 +8,7 @@
             Add for(var i of array) to iterate over elements
             Added getter and setter support
             Stop parsing blocks if not executing (fix #572)
+            Fix stack overflow if interpreting a file full of '{' (fix #1448)
 
      1v99 : Increase jslMatch error buffer size to handle "UNFINISHED TEMPLATE LITERAL" string (#1426)
             nRF5x: Make FlashWrite cope with flash writes > 4k

programming_language: Markdown
filename: jsparse.c
change_type: ModificationType.MODIFY
diff: @@ -2720,6 +2720,7 @@ NO_INLINE JsVar *jspeStatement() {
     return jspeExpression();
   } else if (lex->tk=='{') {
     /* A block of code */
+    if (!jspCheckStackPosition()) return 0;
     jspeBlock();
     return 0;
   } else if (lex->tk==';') {

programming_language: C++
CVE-2017-7856 (published 2017-04-14T04:59Z)

LibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow in the SVMConverter::ImplConvertFromSVM1 function in vcl/source/gdi/svmconverter.cxx.

Severity: HIGH
CVSS v2 base score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)
CVSS v3 base score: 9.8, CRITICAL (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Weakness information:
cwe_id: CWE-787
cwe_name: Out-of-bounds Write
description: The product writes data past the end, or before the beginning, of the intended buffer.
extended_description: 
            
            
             
			 
         
         

Fix information:
repo_url: https://github.com/LibreOffice/core
commit_details: repo_url: https://github.com/LibreOffice/core
author: Caolán McNamara
author_date: 2017-03-11 17:29:05+00:00
msg: ofz#817 nStrLen-1 changed to nStrLen-3

regression from...

commit ff8f6629287d0d1bdbcf4f8ed16cb8d077d08c7a
Author: Caolán McNamara <caolanm@redhat.com>
Date:   Thu Jan 19 16:56:34 2017 +0000

    Resolves: ofz#424 guard against broken dxary length

but this weird typo doesn't appears in the 5-2 and 5-3 backports,
odd how I managed that

Change-Id: I5fb1db2284d48ee78e717d41274a3d37ab0255cf
repository: repo_url: https://github.com/LibreOffice/core
repo_name: LibreOffice/core
description: Read-only LibreOffice core repo - no pull request (use gerrit instead https://gerrit.libreoffice.org/) - don't download zip, use https://dev-www.libreoffice.org/bundles/  instead
repo_language: C++
owner: LibreOffice
file_changes: filename: svmconverter.cxx
change_type: ModificationType.MODIFY
diff: @@ -988,7 +988,7 @@ void SVMConverter::ImplConvertFromSVM1( SvStream& rIStm, GDIMetaFile& rMtf )
                                     // difference to last elem and store
                                     // in very last.
                                     if( nStrLen > 1 )
-                                        pDXAry[ nStrLen-3 ] = pDXAry[ nStrLen-2 ] + pTmpAry[ nStrLen-1 ] - pTmpAry[ nStrLen-2 ];
+                                        pDXAry[ nStrLen-1 ] = pDXAry[ nStrLen-2 ] + pTmpAry[ nStrLen-1 ] - pTmpAry[ nStrLen-2 ];
                                     else
                                         pDXAry[ nStrLen-1 ] = pTmpAry[ nStrLen-1 ]; // len=1: 0th position taken to be 0
                                 }

programming_language: C++
CVE-2024-23637 (published 2024-01-31T18:15Z)

OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to change the password of other admin accounts, including their own, without having to repeat their password. An attacker who managed to hijack an admin account might use this to lock out actual admins from their OctoPrint instance. The vulnerability will be patched in version 1.10.0.

CVSS v3 base score: 4.9, MEDIUM (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

Weakness information:
cwe_id: CWE-287
cwe_name: Improper Authentication
description: When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
extended_description: 
            
			
         
         

Fix information:
repo_url: https://github.com/OctoPrint/OctoPrint
commit_details: repo_url: https://github.com/OctoPrint/OctoPrint
author: Gina Häußge
author_date: 2024-01-31 13:10:40+01:00
msg: Merge branch 'fix/reauthenticate' into maintenance
repository: repo_url: https://github.com/OctoPrint/OctoPrint
repo_name: OctoPrint/OctoPrint
description: OctoPrint is the snappy web interface for your 3D printer!
repo_language: Python
owner: OctoPrint
CVE-2014-125079 (published 2023-01-15T09:15Z)

A vulnerability was found in agy pontifex.http. It has been declared as critical. This vulnerability affects unknown code of the file lib/Http.coffee. The manipulation leads to sql injection. Upgrading to version 0.1.0 is able to address this issue. The name of the patch is e52a758f96861dcef2dabfecb9da191bb2e07761. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218356.

CVSS v3 base score: 9.8, CRITICAL (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Weakness information:
cwe_id: CWE-89
cwe_name: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
description: The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
extended_description: 
            
            
         
         

Fix information:
repo_url: https://github.com/agy/pontifex.http
commit_details: repo_url: https://github.com/agy/pontifex.http
author: Andrew Khoury
author_date: 2014-07-30 13:47:31-04:00
msg: Fixed SQL Injection Hole
repository: repo_url: https://github.com/agy/pontifex.http
repo_name: agy/pontifex.http
description: a HTTP to wot.io bridge
repo_language: CoffeeScript
owner: agy
file_changes: filename: Http.coffee
change_type: ModificationType.MODIFY
diff: @@ -26,7 +26,7 @@ Http = (Bridge,Url) =>
 			return
 		token = req.headers.authorization.match(/bearer (.*)/i)[1]
 		auth_req =
-			url: "http://auth.wot.io/authenticate_token/#{token}/#{command}/#{path}"
+			url: "http://auth.wot.io/authenticate_token/#{token}/#{command}/#{path}".replace("'", "''")
 			json: true
 		try
 			request auth_req, (error, response, body) ->

programming_language: CoffeeScript
CVE-2019-19062 (published 2019-11-18T06:15Z)

A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042.

Severity: MEDIUM
CVSS v2 base score: 4.7 (AV:L/AC:M/Au:N/C:N/I:N/A:C)
CVSS v3 base score: 4.7, MEDIUM (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)

Weakness information:
cwe_id: CWE-401
cwe_name: Missing Release of Memory after Effective Lifetime
description: The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.
extended_description: This is often triggered by improper handling of malformed data or unexpectedly interrupted sessions.  In some languages, developers are responsible for tracking memory allocation and releasing the memory.  If there are no more pointers or references to the memory, then it can no longer be tracked and identified for release.
         

Fix information:
repo_url: https://github.com/torvalds/linux
commit_details: repo_url: https://github.com/torvalds/linux
author: Navid Emamdoost
author_date: 2019-10-04 14:29:16-05:00
msg: crypto: user - fix memory leak in crypto_report

In crypto_report, a new skb is created via nlmsg_new(). This skb should
be released if crypto_report_alg() fails.

Fixes: a38f7907b926 ("crypto: Add userspace configuration API")
Cc: <stable@vger.kernel.org>
Signed-off-by: Navid Emamdoost <navid.emamdoost@gmail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
repository: repo_url: https://github.com/torvalds/linux
repo_name: torvalds/linux
description: Linux kernel source tree
repo_language: C
owner: torvalds
file_changes: filename: crypto_user_base.c
change_type: ModificationType.MODIFY
diff: @@ -213,8 +213,10 @@ static int crypto_report(struct sk_buff *in_skb, struct nlmsghdr *in_nlh,
 drop_alg:
 	crypto_mod_put(alg);
 
-	if (err)
+	if (err) {
+		kfree_skb(skb);
 		return err;
+	}
 
 	return nlmsg_unicast(net->crypto_nlsk, skb, NETLINK_CB(in_skb).portid);
 }

programming_language: C
CVE-2024-21502 (published 2024-02-24T05:15Z)

Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemath_mul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free(), arbitrary realloc(), null pointer dereference and other. Since the stack can be controlled by the attacker, the vulnerability could be used to corrupt allocator structure, leading to possible heap exploitation. The attacker could cause denial of service by exploiting this vulnerability.


Weakness information:
cwe_id: NVD-CWE-noinfo
cwe_name: Insufficient Information
description: There is insufficient information about the issue to classify it; details are unkown or unspecified.
extended_description: Insufficient Information

Fix information:
repo_url: https://github.com/AntonKueltz/fastecdsa
commit_details: repo_url: https://github.com/AntonKueltz/fastecdsa
author: Anton Kueltz
author_date: 2024-02-22 11:26:28-08:00
msg: fix memory corruption issue

see https://gist.github.com/keltecc/49da037072276f21b005a8337c15db26
for details on the issue

verified by running proof of concept against fix -
> python poc.py
3.11.0 (main, Nov 24 2022, 13:13:19) [Clang 13.1.6 (clang-1316.0.21.2.5)]
X: 0x0
Y: 0x0
(On curve <MyCurve>)
<POINT AT INFINITY>
repository: repo_url: https://github.com/AntonKueltz/fastecdsa
repo_name: AntonKueltz/fastecdsa
description: Python library for fast elliptic curve crypto
repo_language: Python
owner: AntonKueltz
file_changes: filename: pyproject.toml
change_type: ModificationType.MODIFY
diff: @@ -19,6 +19,7 @@ classifiers = [
     "Programming Language :: Python :: 3.9",
     "Programming Language :: Python :: 3.10",
     "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
     "Operating System :: MacOS :: MacOS X",
     "Operating System :: POSIX :: Linux"
 ]

programming_language: Haskell
filename: curveMath.c
change_type: ModificationType.MODIFY
diff: @@ -215,6 +215,7 @@ static PyObject * curvemath_mul(PyObject *self, PyObject *args) {
     }
 
     PointZZ_p result;
+    mpz_inits(result.x, result.y, NULL);
     mpz_t scalar;
     mpz_init_set_str(scalar, d, 10);
     CurveZZ_p * curve = buildCurveZZ_p(p, a, b, q, gx, gy, 10);;

programming_language: C++
CVE-2020-8905 (published 2020-08-12T19:15Z)

A buffer length validation vulnerability in Asylo versions prior to 0.6.0 allows an attacker to read data they should not have access to. The 'enc_untrusted_recvfrom' function generates a return value which is deserialized by 'MessageReader', and copied into three different 'extents'. The length of the third 'extents' is controlled by the outside world, and not verified on copy, allowing the attacker to force Asylo to copy trusted memory data into an untrusted buffer of significantly small length.. We recommend updating Asylo to version 0.6.0 or later.

Severity: MEDIUM
CVSS v2 base score: 4.0 (AV:N/AC:L/Au:S/C:P/I:N/A:N)
CVSS v3 base score: 6.5, MEDIUM (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)

Weakness information:
cwe_id: CWE-120
cwe_name: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
description: The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
extended_description: A buffer overflow condition exists when a product attempts to put more data in a buffer than it can hold, or when it attempts to put data in a memory area outside of the boundaries of a buffer. The simplest type of error, and the most common cause of buffer overflows, is the "classic" case in which the product copies the buffer without restricting how much is copied. Other variants exist, but the existence of a classic overflow strongly suggests that the programmer is not considering even the most basic of security protections.
         

Fix information:
repo_url: https://github.com/google/asylo
commit_details: repo_url: https://github.com/google/asylo
author: Chong Cai
author_date: 2020-07-21 17:22:45-07:00
msg: Fix vulnerability in enc_untrusted_recvfrom

Change recvfrom memcpy to check for received_buffer size to avoid
copying extra buffer.

This issue was reported by Qinkun Bao, Zhaofeng Chen, Mingshen Sun, and
Kang Li from Baidu Security.

PiperOrigin-RevId: 322476299
Change-Id: I3606ff9ec51ec7cc4312c7555c645a2fc6e09b21
repository: repo_url: https://github.com/google/asylo
repo_name: google/asylo
description: An open and flexible framework for developing enclave applications
repo_language: C++
owner: google
file_changes: filename: host_calls.cc
change_type: ModificationType.MODIFY
diff: @@ -982,7 +982,7 @@ ssize_t enc_untrusted_recvfrom(int sockfd, void *buf, size_t len, int flags,
   }
 
   auto buffer_received = output.next();
-  memcpy(buf, buffer_received.data(), len);
+  memcpy(buf, buffer_received.data(), std::min(len, buffer_received.size()));
 
   // If |src_addr| is not NULL, and the underlying protocol provides the source
   // address, this source address is filled in. When |src_addr| is NULL, nothing

programming_language: C++
CVE-2023-5897 (published 2023-11-01T01:15Z)

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1.

CVSS v3 base score: 8.8, HIGH (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

Weakness information:
cwe_id: CWE-352
cwe_name: Cross-Site Request Forgery (CSRF)
description: The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
extended_description: When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.
         

Fix information:
repo_url: https://github.com/pkp/customLocale
commit_details: repo_url: https://github.com/pkp/customLocale
author: Alec Smecher
author_date: 2023-10-03 12:35:38-07:00
msg: https://github.com/pkp/customLocale/issues/27 Add CSRF checking
repository: repo_url: https://github.com/pkp/customLocale
repo_name: pkp/customLocale
description: Fine-tune the language of OPS, OJS, or OMP without modifying files or changing it for everyone.
repo_language: PHP
owner: pkp
file_changes: filename: CustomLocaleGridHandler.php
change_type: ModificationType.MODIFY
diff: @@ -74,6 +74,8 @@ class CustomLocaleGridHandler extends GridHandler
     {
         ['locale' => $locale, 'changes' => $changes] = $args;
 
+	if (!$request->checkCSRF()) return new JSONMessage(false);
+
         if (!count($changes)) {
             $this->setupTemplate($request);
             // Create and present the edit form

programming_language: PHP
filename: localeFile.tpl
change_type: ModificationType.MODIFY
diff: @@ -7,6 +7,7 @@
  *}
 
 <form class="pkp_form" id="localeFilesForm" method="post" action="{url router=$smarty.const.ROUTE_COMPONENT component="plugins.generic.customLocale.controllers.grid.CustomLocaleGridHandler" op="updateLocale" locale=$locale key=$name anchor="localeContents"}">
+	{csrf}
 	<link rel="stylesheet" href="{$baseUrl}/plugins/generic/customLocale/css/customLocale.css" type="text/css" />
 	<div id="customLocales">
 		{* TABLE *}
@@ -185,4 +186,4 @@
 		customLocalesApp.data.localeKeysMaster = {$referenceLocaleContents|json_encode};
 		new pkp.Vue(customLocalesApp);
 	</script>
-</form>
\ No newline at end of file
+</form>

programming_language: HTML