GHSA-Q89C-Q3H5-W34G i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns

Summary Versions of i18next-http-backend prior to 3.0.5 interpolate the lng and ns values directly into the configured loadPath / addPath URL template without any encoding, validation, or path sanitisation. When an application exposes the language-code selection to user-controlled input the defau...

CVE-2026-35548

creationtimestamp| type| source ---|---|--- 2026-04-22 17:17:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3yu6h6v32p 2026-04-22 19:14:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk47eyh6d32l...

CVE-2018-25270

creationtimestamp| type| source ---|---|--- 2026-04-22 17:12:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3yl7zcvv2h 2026-05-31 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mn6ctysno32z...

CVE-2018-25268

creationtimestamp| type| source ---|---|--- 2026-04-22 17:02:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3xzd6sia2v 2026-05-31 08:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mn54cagsak26...

CVE-2018-25266

creationtimestamp| type| source ---|---|--- 2026-04-22 16:57:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3xqergbc2e...

CVE-2018-25271

creationtimestamp| type| source ---|---|--- 2026-04-22 16:52:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3xhgdodg2n...

CVE-2018-25262

creationtimestamp| type| source ---|---|--- 2026-04-22 16:22:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3vrxujzu2i...

CVE-2018-25272

creationtimestamp| type| source ---|---|--- 2026-04-22 16:19:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3vm5jpdp2n...

python: Python: Command-line option injection in webbrowser.open() via crafted URLs

A flaw was found in Python. The webbrowser.open API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options,...

CVE-2026-31500

creationtimestamp| type| source ---|---|--- 2026-04-22 15:24:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116449047471699253 2026-07-02 07:15:52+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702 2026-07-06 05:50:11+00:00| see...

CVE-2026-1913

creationtimestamp| type| source ---|---|--- 2026-04-22 13:13:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3laa6wof2r 2026-04-24 15:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkatxnvegv2q...

CVE-2026-6396

creationtimestamp| type| source ---|---|--- 2026-04-22 12:58:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3kfevktc2h 2026-04-25 16:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkdhrt47wy24...

CVE-2026-35247

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwxg6zh2c...

CVE-2026-1660

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwdl7pl2u 2026-04-24 07:57:51+00:00| seen| https://ccb.belgium.be/advisories/warning-11-new-vulnerabilities-gitlab-ce-and-ee-editions-patch-immediately...

CVE-2026-5816

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwdl7pl2u 2026-04-22 18:19:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk44cuqcde2c 2026-04-22 19:00:19+00:00| seen|...

CVE-2026-6845

creationtimestamp| type| source ---|---|--- 2026-04-22 12:48:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3jthzu5h2e 2026-07-03 17:50:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr4c6aoer2f...

CVE-2026-6294

creationtimestamp| type| source ---|---|--- 2026-04-22 12:40:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3jf3ktum2k 2026-04-25 11:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkcwzfwzdo2l...

CVE-2026-33256

creationtimestamp| type| source ---|---|--- 2026-04-22 12:22:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3iespefk2k 2026-04-27 06:39:30+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mkhhkb2n4saf...

CVE-2026-33260

creationtimestamp| type| source ---|---|--- 2026-04-22 12:13:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3hvqcf4a2c...

EUVD-2026-24672

The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4. This is due to the settings form on the admin page wpoadminpage.php lacking nonce generation wpnoncefield and verification wpverifynonce/checkadminreferer. Thi...