Skip to content
OpenAdvisories

Package · npm

i18nextify

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.7
    CVE-2026-41692

    i18nextify is vulnerable to DOM XSS via javascript:/data: URL schemes in translated href/src attributes

    i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes. Versions prior to 4.0.8 substitute {{key}} interpolation tokens inside src and href attribute values with the raw string returned by i18ne…

    i18next i18nextify i18nextify npm