node-i18next-http-backend vulnerabilities (Ubuntu)

3 vulnerabilities.

• node-i18next-http-backend Ubuntu i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string CVE-2026-118258 Fix available 3.7 LowOctober 28, 2026
• node-i18next-http-backend Ubuntu i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl CVE-2026-115730 Fix available 2.3 LowOctober 23, 2026
• node-i18next-http-backend Ubuntu i18next-http-backend incomplete URL validation permits SSRF CVE-2026-105800 Fix available 3.7 LowOctober 6, 2026