Product by HackerOne

    i18next i18next-http-backend

    4 known vulnerabilities in i18next i18next-http-backend (HackerOne), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in i18next i18next-http-backend (HackerOne)
    CriticalCVE-2026-41691

    i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns

    9.1
    LowCVE-2026-105800

    i18next-http-backend incomplete URL validation permits SSRF

    3.7
    LowCVE-2026-118258

    i18next i18next-http-backend: Injection

    3.7
    LowCVE-2026-115730

    i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl

    3.1

    All products by HackerOne