Security: i18next/i18next-http-middleware
Security Advisories
View information about security vulnerabilities from this repository's maintainers.
-
i18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting namesGHSA-f49m-vf83-692w published
May 22, 2026 by adraiCritical -
Path traversal / SSRF in i18next-http-middleware via user-controlled language and namespace parametersGHSA-jfgf-83c5-2c4m published
Apr 22, 2026 by adraiHigh -
HTTP response splitting and DoS in i18next-http-middleware via unsanitised Content-Language headerGHSA-c3h8-g69v-pjrg published
Apr 18, 2026 by adraiHigh -
Prototype pollution in i18next-http-middleware via user-controlled language and namespace parametersGHSA-5fgg-jcpf-8jjw published
Apr 18, 2026 by adraiHigh