Threats Tagged 'ghsa-w47m-j727-m843'

CVE-2026-115730 is a low-severity vulnerability in i18next-http-backend versions 4.0.2 up to but not including 4.0.3. It involves an incomplete fix in the interpolateUrl() function that allows attackers controlling the namespace (ns) value to redirect translation requests by supplying a namespace starting with a slash. This can lead to loading attacker-hosted translations, enabling UI content injection and cross-site scripting (XSS).