I1
Product
i18next-http-backend
by i18next · last CVE Oct 23, 2026
3
CVEs
0
On KEV
9.1
Max CVSS
2
New 30D
Severity mix
Critical 1High 0Medium 0Low 2
Watch

Add i18next-http-backend to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41691
9.1
0%
May 7
i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns
Affected: < 3.0.5
CVE-2026-105800
3.7
0%
Oct 6
i18next-http-backend incomplete URL validation permits SSRF
Affected: < 4.0.2
CVE-2026-115730
New
3.1
0%
Oct 23
i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl
Affected: 4.0.2 before 4.0.3
Showing 3