Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities indompurify, axios, and i18next-http-backend

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities indompurify, axios, and i18next-http-backend. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-105800 DESCRIPTION: i18next-http-backend is a backend layer for i18next...

Linux Distros Unpatched Vulnerability : CVE-2026-105800

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled languag...

CVE-2026-105800

A flaw was found in i18next-http-backend. A remote attacker can supply crafted language or namespace values to applications configured with custom translation path templates that begin directly with placeholders. This manipulation causes the application to generate unintended external web...

NPM: i18next-http-backend incomplete URL validation permits SSRF

NPM: i18next-http-backend incomplete URL validation permits SSRF vulnerability discovered by ? in WordPress Npm i18next-http-backend versions 4.0.2...

Server-side Request Forgery (SSRF)

Overview i18next-http-backend is an i18next-http-backend is a backend layer for i18next using in Node.js, in the browser and for Deno. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via insufficient validation in isSafeUrlSegment functions in lib/utils.js,...

@coveo/atomic (>=3.61.2, <=3.61.3), @coveo/atomic-angular (>=3.11.25, <=3.11.26) +13 more potentially affected by CVE-2026-105800 via i18next-http-backend (>=4.0.0, <=4.0.1)

i18next-http-backend NPM version =4.0.0, =3.61.2, =3.11.25, =3.11.42, =3.11.42, =3.61.2, =3.11.42, =3.61.2, =1.0.0-rc.6, =1.15.0, =1.6.1, =5.0.0, =10.0.0, =3.0.0, =3.0.5 - zhiyu-hands 1.14.0 Source cves: CVE-2026-105800 Source advisory: SNYK:JS-I18NEXTHTTPBACKEND-20580644...

@coveo/atomic (>=3.61.2, <=3.61.3), @coveo/atomic-angular (>=3.11.25, <=3.11.26) +13 more potentially affected by CVE-2026-105800 via i18next-http-backend (>=4.0.0, <=4.0.1)

i18next-http-backend NPM version =4.0.0, =3.61.2, =3.11.25, =3.11.42, =3.11.42, =3.61.2, =3.11.42, =3.61.2, =1.0.0-rc.6, =1.15.0, =1.6.1, =5.0.0, =10.0.0, =3.0.0, =3.0.5 - zhiyu-hands 1.14.0 Source cves: CVE-2026-105800 Source advisory: GHSA-XVQ9-WJP8-HWQF...

GHSA-XVQ9-WJP8-HWQF i18next-http-backend incomplete URL validation permits SSRF

There is an SSRF vulnerability when using i18next-http-backend. A colon in an attacker-controlled language value can make a custom path template request an unintended origin. This is reachable under the following conditions: Attacker controls i18next language or namespace input that is interpolat...

i18next-http-backend incomplete URL validation permits SSRF

There is an SSRF vulnerability when using i18next-http-backend. A colon in an attacker-controlled language value can make a custom path template request an unintended origin. This is reachable under the following conditions: Attacker controls i18next language or namespace input that is interpolat...

@coveo/atomic (>=3.61.2, <=3.61.3), @coveo/atomic-angular (>=3.11.25, <=3.11.26) +13 more potentially affected by CVE-2026-105800 via i18next-http-backend (>=4.0.0, <=4.0.1)

i18next-http-backend NPM version =4.0.0, =3.61.2, =3.11.25, =3.11.42, =3.11.42, =3.61.2, =3.11.42, =3.61.2, =1.0.0-rc.6, =1.15.0, =1.6.1, =5.0.0, =10.0.0, =3.0.0, =3.0.5 - zhiyu-hands 1.14.0 Source cves: CVE-2026-105800 Source advisory: OSV:GHSA-XVQ9-WJP8-HWQF...

CVE-2026-105800

i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...

DEBIAN-CVE-2026-105800

i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...

CVE-2026-105800

i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...

UBUNTU-CVE-2026-105800

i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...

CVE-2026-105800

The i18next-http-backend library, used for loading translation resources in Node.js , browsers , and Deno , is vulnerable to Server-Side Request Forgery (SSRF) and URL injection prior to version 4.0.2 . The root cause is incomplete URL validation where attacker-controlled language or namespace va...

CVE-2026-105800 i18next-http-backend incomplete URL validation permits SSRF

i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...

@coveo/atomic (>=3.61.2, <=3.61.3), @coveo/atomic-angular (>=3.11.25, <=3.11.26) +13 more potentially affected by CVE-2026-105800 via i18next-http-backend (>=4.0.0, <=4.0.1)

i18next-http-backend NPM version =4.0.0, =3.61.2, =3.11.25, =3.11.42, =3.11.42, =3.61.2, =3.11.42, =3.61.2, =1.0.0-rc.6, =1.15.0, =1.6.1, =5.0.0, =10.0.0, =3.0.0, =3.0.5 - zhiyu-hands 1.14.0 Source cves: CVE-2026-105800 Source advisory: MEND:CVE-2026-105800...

CVE-2026-105800 i18next-http-backend incomplete URL validation permits SSRF

i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...

EUVD-2026-93433

i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...

CVE-2026-105800 i18next-http-backend incomplete URL validation permits SSRF

i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...