i18next

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

i18next records in CISA KEV

No i18next vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

I18next 2 records LOW I18next-fs-backend 1 record MEDIUM I18next-http-backend 1 record MEDIUM I18next-http-middleware 1 record MEDIUM I18nextify 1 record LOW

Records

1 record in I18next-http-backend · all components

TI-2026-30208 CVE-2026-41691 · GHSA-q89c-q3h5-w34g

i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns

MEDIUM 45

Copilot said: i18nextify is a JavaScript library that adds i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00313 Published 2026-05-07 Fixed in 3.0.5 CWE-22

Open these records in search →

Critical	3
High	4
Medium	4
Low	3
No CVSS	0