Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
added 2026/06/25 5:28 p.m.16 views

i18next-fs-backend vulnerable to prototype pollution via crafted missing-key string

Impact i18next-fs-backend ≤ 2.6.5, when used to persist missing translation keys e.g. via i18next-http-middleware's missingKeyHandler exposed to untrusted input, is vulnerable to prototype pollution via crafted missing-key strings. Backend.writeFile splits each queued missing-key string on the...

9.1CVSS5.9AI score0.00507EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder