Skip to content
OpenAdvisories

Package · npm

i18next-http-middleware

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-48714

    i18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting names

    i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. In versions prior to 3.9.7, the missingKeyHandler blocked the literal request-body keys __proto__, constructor, and prototype (added in 3…

    i18next i18next-http-middleware i18next-http-middleware npm