What’s Vulnerable › Products

i18next-http-middleware vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your i18next-http-middleware version is affected

Latest i18next-http-middleware vulnerabilities

• CVE-2026-48714 — i18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting names (CVSS 9.1)
• CVE-2026-42353 — Path traversal / SSRF in i18next-http-middleware via user-controlled language and namespace parameters (CVSS 8.2)
• CVE-2026-41690 — Prototype pollution and path traversal in i18next-http-middleware via user-controlled language and namespace parameters (CVSS 8.6)
• CVE-2026-41683 — HTTP response splitting and DoS in i18next-http-middleware via unsanitised Content-Language header (CVSS 8.6)