Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

i18next Vulnerabilities & CVE List (Oct 2026) | CyStack

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-115730`i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl	Exploitation statusNot confirmed	FixYes	Affected producti18next-http-backend	Published10/23/2026	SeverityLow
`CVE-2026-105800`i18next-http-backend incomplete URL validation permits SSRF	Exploitation statusActively exploited	FixYes	Affected producti18next-http-backend	Published
`CVE-2026-48714`i18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting names	Exploitation statusNot exploited	FixYes	Affected producti18next-http-middleware
`CVE-2026-48713`i18next-fs-backend: Prototype pollution via crafted missing-key string	Exploitation statusNot exploited	FixYes	Affected producti18next-fs-backend	Published
`CVE-2026-41693`i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite	Exploitation statusNot exploited	FixYes	Affected producti18next-fs-backend	Published
`CVE-2026-42353`Path traversal / SSRF in i18next-http-middleware via user-controlled language and namespace parameters	Exploitation statusNot exploited	FixYes	Affected producti18next-http-middleware
`CVE-2026-41683`HTTP response splitting and DoS in i18next-http-middleware via unsanitised Content-Language header	Exploitation statusNot exploited	FixYes	Affected producti18next-http-middleware	Published
`CVE-2026-41690`Prototype pollution and path traversal in i18next-http-middleware via user-controlled language and namespace parameters	Exploitation statusNot exploited	FixNo	Affected producti18next-http-middleware
`CVE-2026-41691`i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns	Exploitation statusNot exploited	FixYes	Affected producti18next-http-backend	Published
`CVE-2026-41692`i18nextify is vulnerable to DOM XSS via javascript:/data: URL schemes in translated href/src attributes	Exploitation statusNot exploited	FixYes	Affected producti18nextify	Published

12 Results | Page 1 of 2

Security vulnerabilities from i18next

i18next

How many security vulnerabilities does i18next have?

Which i18next product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular i18next products