i18next vulnerabilities

CVEs whose affected-version data names the i18next package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-63402Medium· 5.9PoC

1w ago

i18next: Shared built-in corruption through inherited-key deepExtend recursion

i18next is an internationalization framework for JavaScript. Prior to version 26.3.4, `deepExtend` in `src/utils.js` checks property existence with the in operator and recurses into inherited built-ins reached through `Object.prototype`.…

▾ Twilighti18next · i18nextEPSS 0.26%via CVEORG