Security
فارسی
All products

i18next-http-backend

npm · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
i18next-http-backend: Namespace value starting with / forms a protocol-relative URL when loadPath/addPath places {{ns}} right after a / (bypass of the // check added for GHSA-xvq9-wjp8-hwqf)CVE-2026-115730 · GHSA-9JHJ-WVMW-CFX5 i18next-http-backendMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat Low Fix reported
i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query stringCVE-2026-118258 · GHSA-3CMX-XJWW-583X i18next-http-backendMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat Low Fix reported
i18next-http-backend incomplete URL validation permits SSRFCVE-2026-105800 · GHSA-XVQ9-WJP8-HWQF i18next-http-backendMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat Low Fix reported
i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/nsCVE-2026-41691 · GHSA-Q89C-Q3H5-W34G i18next-http-backend npm Medium Fix reported