pkg:npm/i18next-http-middleware

All known vulnerabilities

• CRITICAL9.1CVE-2026-48714i18next-http-middleware: MissingKeyHandler does not reject keys whose segments contain prototype-polluting names
  from 0, < 3.9.7
• HIGH8.6CVE-2026-41683i18next-http-middleware: HTTP response splitting and DoS via unsanitised Content-Language header
  from 0, < 3.9.3
• HIGH8.6CVE-2026-41690i18next-http-middleware: Prototype pollution and path traversal via user-controlled language and namespace parameters
  from 0, < 3.9.3
• HIGH8.2i18next-http-middleware has path traversal / SSRF via user-controlled language and namespace parameters
  from 0, < 3.9.3