{"id":"ghsa-ghsa-9jhj-wvmw-cfx5","seq":2056956,"kind":"advisory","title":"i18next-http-backend: Namespace value starting with / forms a protocol-relative URL when loadPath/addPath places {{ns}} right after a / (bypass of the // check added for GHSA-xvq9-wjp8-hwqf)","url":"https://github.com/advisories/GHSA-9jhj-wvmw-cfx5","permalink":"https://vulnpulse.app/items/ghsa-ghsa-9jhj-wvmw-cfx5","summary":"影響: npm:i18next-http-backend < 4.0.3 → 4.0.3\nAffected versions Verified on 4.0.2 (latest on npm) and on commit 07e0288 (the GHSA-xvq9-wjp8-hwqf fix). Earlier 3.x/4.x versions that allow / in ns are likely affected too. Not verified on them. Impact Same class as GHSA-xvq9-wjp8-hwqf and GHSA-q89c-q3h5-w34g: when an attacker controls the namespace value, the request goes to an attacker-chosen origin. In a browser this loads attacker-controlled translation JSON (content injection into the UI, and XSS where translations are rendered as HTML).…","severity":"low","techs":["nodejs"],"cves":["CVE-2026-115730"],"tags":["GHSA-9jhj-wvmw-cfx5","i18next-http-backend"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-28T21:07:57.000Z","fetched_at":"2026-10-29T00:48:52.653Z"}