Product by HackerOne
i18next i18next-http-backend
4 known vulnerabilities in i18next i18next-http-backend (HackerOne), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-41691 | i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns | 9.1 | |
| Low | CVE-2026-105800 | i18next-http-backend incomplete URL validation permits SSRF | 3.7 | |
| Low | CVE-2026-118258 | i18next i18next-http-backend: Injection | 3.7 | |
| Low | CVE-2026-115730 | i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl | 3.1 |