Polylingua Translation service

[dittops]

Description

This PR introduces PolyLingua, a new OPEA example demonstrating a complete production-ready translation service using OPEA's microservices architecture. The service features a modern Next.js UI, automatic language detection.

[github-actions]

Dependency Review

The following issues were found:

• ❌ 1 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 4 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

PolyLingua/ui/package.json

Name	Version	Vulnerability	Severity
next	14.2.5	Authorization Bypass in Next.js Middleware	critical
		Next.js Cache Poisoning	high
		Next.js authorization bypass vulnerability	high
		Denial of Service condition in Next.js image optimization	moderate
		Next.js Allows a Denial of Service (DoS) with Server Actions	moderate
		Next.js Affected by Cache Key Confusion for Image Optimization API Routes	moderate
		Next.js Content Injection Vulnerability for Image Optimization	moderate
		Next.js Improper Middleware Redirect Handling Leads to SSRF	moderate
		Information exposure in Next.js dev server due to lack of origin verification	low
		Next.js Race Condition to Cache Poisoning	low

License Issues

PolyLingua/requirements.txt

Package	Version	License	Issue Type
aiohttp	>= 3.9.0	Null	Unknown License
langdetect	>= 1.0.9	Null	Unknown License
python-multipart	>= 0.0.9	Null	Unknown License

PolyLingua/ui/package.json

Package	Version	License	Issue Type
lucide-react	^0.424.0	Null	Unknown License

Scanned Files

• PolyLingua/requirements.txt
• PolyLingua/ui/package.json

[joshuayao]

Dependency Review

The following issues were found:

• ❌ 1 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 4 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

PolyLingua/ui/package.json

Name Version Vulnerability Severity
next 14.2.5 Authorization Bypass in Next.js Middleware critical
Next.js Cache Poisoning high
Next.js authorization bypass vulnerability high
Denial of Service condition in Next.js image optimization moderate
Next.js Allows a Denial of Service (DoS) with Server Actions moderate
Next.js Affected by Cache Key Confusion for Image Optimization API Routes moderate
Next.js Content Injection Vulnerability for Image Optimization moderate
Next.js Improper Middleware Redirect Handling Leads to SSRF moderate
Information exposure in Next.js dev server due to lack of origin verification low
Next.js Race Condition to Cache Poisoning low

License Issues

PolyLingua/requirements.txt

Package Version License Issue Type
aiohttp >= 3.9.0 Null Unknown License
langdetect >= 1.0.9 Null Unknown License
python-multipart >= 0.0.9 Null Unknown License

PolyLingua/ui/package.json

Package Version License Issue Type
lucide-react ^0.424.0 Null Unknown License

Scanned Files

• PolyLingua/requirements.txt
• PolyLingua/ui/package.json

Hi @dittops please help fix the critical and high CVEs.