i18next-http-backend vulnerabilities (TuxCare)

2 vulnerabilities.

• i18next-http-backend TuxCare i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string CVE-2026-118258 Fix available 3.7 LowOctober 28, 2026
• i18next-http-backend TuxCare i18next-http-backend incomplete URL validation permits SSRF CVE-2026-105800 Fix available 3.7 LowOctober 6, 2026