CVE-2026-63402

The JavaScript internationalization framework i18next is vulnerable to shared built-in corruption in versions prior to 26.3.4 due to a flaw in the deepExtend function within src/utils.js. The root cause is the use of the in operator, which allows recursion into inherited built-ins accessed via Ob...