laravel-internationalization-and-translation

Fail

Audited by Snyk on Feb 16, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). The guide is mostly benign i18n examples but contains a critical vulnerability: TranslationController accepts an unvalidated locale parameter and uses include() on files under lang_path(), enabling local file inclusion and potential disclosure/exfiltration of sensitive PHP config/data (and caching of those secrets), which is a high-risk flaw.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 16, 2026, 02:37 AM