CVE-2026-41683

creationtimestamp| type| source ---|---|--- 2026-05-08 17:22:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleam5ppcx2c 2026-05-08 19:13:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlegs6ixd72c...

CVE-2026-41683

i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. Prior to version 3.9.3, i18next-http-middleware wrote user-controlled language values into the Content-Language response header after passing them through utils.escape, which ...