65 matches found
CVE-2026-48714: Improperly Controlled Modification of Object Prototype Attributes
i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. In versions prior to 3.9.7, the missingKeyHandler blocked the literal request-body keys proto, constructor, and prototype added in 3.9.3, see GHSA-5fgg-jcpf-8jjw, but did not...
9.1CVSS5.8AI score0.00657EPSS
SaveExploits0References4
20