i18next i18next-http-backend

• CVE-2026-118258 Low 3.7 i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string 0.3%
• CVE-2026-115730 Low 3.1 i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl 0.3%
• CVE-2026-105800 Low 3.7 i18next-http-backend incomplete URL validation permits SSRF 0.3%
• CVE-2026-41691 Medium 6.5 i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns 0.3%