Lucene search
+L

5 matches found

Cvelist
Cvelist
added 2026/06/15 8:31 p.m.35 views

CVE-2026-48713 i18next-fs-backend: Prototype pollution via crafted missing-key string

Versions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-key strings when used to persist missing translation keys e.g. via i18next-http-middleware's missingKeyHandler exposed to untrusted input. Backend.writeFile splits each queued missing-key string on the configured...

9.1CVSS0.00419EPSS
SaveExploits0References2
Rows per page
Query Builder