Skip to content
OpenAdvisories

Vendor

locize

3 known vulnerabilities.

Products

i18next-locize-backend 1 gettext-converter 1 locize 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-41885

    Path traversal / URL injection via unsanitised lng/ns/projectId/version in i18next-locize-backend

    i18next-locize-backend is a simple i18next backend for locize.com which can be used in Node.js, in the browser and for Deno. Prior to version 9.0.2, i18next-locize-backend interpolates lng, ns, projectId, and version directly into the configured loadPath / pr…

    locize i18next-locize-backend i18next-locize-backend npm