i18next i18next-http-middleware

• CVE-2026-48714 Critical 9.1 i18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting names 0.5%
• CVE-2026-42353 High 8.2 Path traversal / SSRF in i18next-http-middleware via user-controlled language and namespace parameters 0.4%
• CVE-2026-41683 High 8.6 HTTP response splitting and DoS in i18next-http-middleware via unsanitised Content-Language header 0.3%
• CVE-2026-41690 High 8.6 Prototype pollution and path traversal in i18next-http-middleware via user-controlled language and namespace parameters 0.3%