I1
Product
i18next-http-backend
4
CVEs
0
On KEV
9.1
Max CVSS
3
New 30D
Severity mix
Critical 1High 0Medium 0Low 3
Watch
Add i18next-http-backend to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-118258 New | 3.7 | Oct 28 | i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string Affected: < 4.0.4 |
| CVE-2026-105800 | 3.7 | Oct 6 | i18next-http-backend incomplete URL validation permits SSRF Affected: < 4.0.2 |
| CVE-2026-115730 New | 3.1 | Oct 23 | i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl Affected: 4.0.2 before 4.0.3 |
Showing 3