Skip to content
OpenAdvisories

Package · npm

i18next-fs-backend

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.2

    i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite

    i18next-fs-backend is a backend layer for i18next using in Node.js and for Deno to load translations from the filesystem. Prior to version 2.6.4, i18next-fs-backend substitutes the lng and ns options directly into the configured loadPath / addPath templates a…