I1
Product
i18next-http-middleware
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 0Low 0
Watch
Add i18next-http-middleware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48714 | 9.1 | Jun 15 | i18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting names Affected: < 3.9.7 |
| CVE-2026-41683 | 8.6 | May 8 | HTTP response splitting and DoS in i18next-http-middleware via unsanitised Content-Language header Affected: < 3.9.3 |
| CVE-2026-41690 | 8.6 | May 8 | Prototype pollution and path traversal in i18next-http-middleware via user-controlled language and namespace parameters Affected: < 3.9.3 |
| CVE-2026-42353 | 8.2 | May 8 | Path traversal / SSRF in i18next-http-middleware via user-controlled language and namespace parameters Affected: < 3.9.3 |
Showing 4