node-i18next-http-backend

2 results · Feed

• Low 3.7
  CVE-2026-105800

  i18next-http-backend incomplete URL validation permits SSRF

  i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with {{ln…

  i18next i18next-http-backend i18next-http-backend node-i18next-http-backend Debian Ubuntu npm
  Oct 6, 2026
• Medium 6.5
  CVE-2026-41691

  i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns

  Copilot said: i18nextify is a JavaScript library that adds i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes. Versions prior to 3.0.5 interpolate the lng and ns values directly into the con…

  i18next i18next-http-backend i18next-http-backend node-i18next-http-backend Debian npm
  May 7, 2026