https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-24T20:31:27.877740+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-115730 fkie_cve-2026-115730 2026-10-24T20:31:27.879108+00:00

i18next-http-backend 4.0.2 contains an incomplete fix in interpolateUrl() that allows attackers to redirect translation requests by supplying an ns value starting with a slash. Attackers controlling the namespace value can form a protocol-relative URL in loadPath or addPath templates to load attacker-hosted translations, enabling UI content injection and cross-site scripting.

 https://db.gcve.eu/vuln/ghsa-w47m-j727-m843 GHSA-w47m-j727-m843 2026-10-24T20:31:27.879186+00:00

i18next-http-backend 4.0.2 contains an incomplete fix in interpolateUrl() that allows attackers to redirect translation requests by supplying an ns value starting with a slash. Attackers controlling the namespace value can form a protocol-relative URL in loadPath or addPath templates to load attacker-hosted translations, enabling UI content injection and cross-site scripting.