Skip to content
OpenAdvisories

Package · npm

i18next-fs-backend

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.1
    CVE-2026-48713

    i18next-fs-backend: Prototype pollution via crafted missing-key string

    Versions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-key strings when used to persist missing translation keys (e.g. via i18next-http-middleware's missingKeyHandler exposed to untrusted input). Backend.writeFile() splits each queu…

    i18next i18next-fs-backend i18next-fs-backend npm
  • High 8.2
    CVE-2026-41693

    i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite

    i18next-fs-backend is a backend layer for i18next using in Node.js and for Deno to load translations from the filesystem. Prior to version 2.6.4, i18next-fs-backend substitutes the lng and ns options directly into the configured loadPath / addPath templates a…

    i18next i18next-fs-backend i18next-fs-backend npm