I1
Vendor
i18next
12
CVEs
0
On KEV
2
New 30D
Products
I19.1
i18next-http-backend
i18next
3 CVEs0 on KEV2 new
I19.1
i18next-http-middleware
i18next
4 CVEs0 on KEV0 new
I16.1
I18next
I18next
2 CVEs0 on KEV0 new
I19.1
i18next-fs-backend
i18next
2 CVEs0 on KEV0 new
I14.7
i18nextify
i18next
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115730 New | I1 i18next-http-backend i18next | 3.1 | Oct 23 | i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl |
| CVE-2026-105800 | I1 i18next-http-backend i18next | 3.7 | Oct 6 | i18next-http-backend incomplete URL validation permits SSRF |
| CVE-2026-48714 | I1 i18next-http-middleware i18next | 9.1 | Jun 15 | i18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting names |
| CVE-2026-48713 | I1 i18next-fs-backend i18next | 9.1 | Jun 15 | i18next-fs-backend: Prototype pollution via crafted missing-key string |
| CVE-2026-41693 | I1 i18next-fs-backend i18next | 8.2 | May 8 | i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite |
| CVE-2026-42353 | I1 i18next-http-middleware i18next | 8.2 | May 8 | Path traversal / SSRF in i18next-http-middleware via user-controlled language and namespace parameters |
| CVE-2026-41683 | I1 i18next-http-middleware i18next | 8.6 | May 8 | HTTP response splitting and DoS in i18next-http-middleware via unsanitised Content-Language header |
| CVE-2026-41690 | I1 i18next-http-middleware i18next | 8.6 | May 8 | Prototype pollution and path traversal in i18next-http-middleware via user-controlled language and namespace parameters |
| CVE-2026-41691 | I1 i18next-http-backend i18next | 9.1 | May 7 | i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns |
| CVE-2026-41692 | I1 i18nextify i18next | 4.7 | May 7 | i18nextify is vulnerable to DOM XSS via javascript:/data: URL schemes in translated href/src attributes |
| CVE-2017-16008 | I1 I18next I18next | 6.1 | Jun 4 | i18next is a language translation framework |
| CVE-2017-16010 | I1 I18next I18next | 6.1 | May 29 | i18next is a language translation framework |