https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-24T19:28:45.695675+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-115730 CVE-2026-115730 — i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl 2026-10-24T19:28:45.697367+00:00

Affected: i18next-http-backend

i18next-http-backend 4.0.2 contains an incomplete fix in interpolateUrl() that allows attackers to redirect translation requests by supplying an ns value starting with a slash. Attackers controlling the namespace value can form a protocol-relative URL in loadPath or addPath templates to load attacker-hosted translations, enabling UI content injection and cross-site scripting.