i18next
Security Risk Profile
59
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 29, 2018 to present
6
Total CVEs
3
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
7.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
59/100
medium
Severity Distribution
Critical
3High
0Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
3
2
Path Traversal
2
3
Code Injection
1
Most Affected Products
1. IBM Business Automation Insights4
2. npm/i18next-fs-backend3
3. npm/i18next-http-middleware2
4. npm/i18nextify2
5. npm/i18next2
Recent Vulnerabilities
See more →CVE-2026-48714
CVSS 9.1critical
i18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting names
6/15/2026
CVE-2026-48713
CVSS 9.1critical
i18next-fs-backend: Prototype pollution via crafted missing-key string
6/15/2026
CVE-2026-41691
CVSS 9.1critical
i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns
5/7/2026
CVE-2026-41692
CVSS 4.7medium
i18nextify is vulnerable to DOM XSS via javascript:/data: URL schemes in translated href/src attributes
5/7/2026
CVE-2017-16008
CVSS 6.1medium
6/4/2018
CVE-2017-16010
CVSS 6.1medium
5/29/2018
Monitor i18next in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.