[Git][security-tracker-team/security-tracker][master] Add CVE-2026-115730/node-i18next-http-backend

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
87300991 by Salvatore Bonaccorso at 2026-10-24T14:19:29+02:00
Add CVE-2026-115730/node-i18next-http-backend

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -331,7 +331,9 @@ CVE-2026-115750 (mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential
 CVE-2026-115749 (hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0 ...)
 	NOT-FOR-US: hydra-ray-launcher
 CVE-2026-115730 (i18next-http-backend 4.0.2 contains an incomplete fix in interpolateUr ...)
-	TODO: check
+	- node-i18next-http-backend <not-affected> ((Incomplte fix for CVE-2026-41691 and CVE-2026-105800 not appled)
+	NOTE: https://github.com/i18next/i18next-http-backend/security/advisories/GHSA-9jhj-wvmw-cfx5
+	NOTE: Fixed by: https://github.com/i18next/i18next-http-backend/commit/042c3d4e4e9d73b2ae3aa76b22cb45d48f1e35b7 (v4.0.3)
 CVE-2026-115729 (@pdfme/common from 5.5.10 before 6.2.6 contains a server-side request  ...)
 	NOT-FOR-US: pdfme/common
 CVE-2026-115728 (@hapi/content from 6.0.1 before 6.0.3 contains a regular expression de ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8730099143cb3a3cddaae3a84f0735bf9e668b03

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8730099143cb3a3cddaae3a84f0735bf9e668b03
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261024/1eefe056/attachment.htm>