HIGH8.6npm
GHSA-5fgg-jcpf-8jjw· CVE-2026-41690i18next-http-middleware: Prototype pollution and path traversal via user-controlled language and namespace parameters
Modified: 5/13/2026
package
npm/i18next-http-middleware
pkg:npm/i18next-http-middleware
HIGH8.6npm
GHSA-c3h8-g69v-pjrg· CVE-2026-41683i18next-http-middleware: HTTP response splitting and DoS via unsanitised Content-Language header
Modified: 5/13/2026
CRITICAL9.1npm
GHSA-f49m-vf83-692w· CVE-2026-48714i18next-http-middleware: MissingKeyHandler does not reject keys whose segments contain prototype-polluting names
Modified: 6/25/2026
HIGH8.2npm
GHSA-jfgf-83c5-2c4m· CVE-2026-42353i18next-http-middleware has path traversal / SSRF via user-controlled language and namespace parameters
Modified: 5/13/2026