i18next-http-middleware
js · i18next-http-middlewareCritical
i18next-http-middleware ≤ 3.9.6: Remote prototype pollution via missingKeyHandler
i18next-http-middleware ≤ 3.9.6 blocked literal request-body keys __proto__, constructor, and prototype but did not reject dotted
26 Jun 2026 · act now