Vulnerability intelligence
CVE-2026-48714
CVE-2026-48713 and CVE-2026-48714 hit the npm ecosystem's dominant internationalisation library. Both scored CVSS 9.1. The second vulnerability bypassed the fix for the first using dotted __proto__ variants. Every Next.js, React, Angular, and Vue app using i18next was exposed.
2026
What WebPulse reported · 2 analyses
i18next Prototype Pollution: The Translation Layer Nobody Thought to Secure.
CVE-2026-48713 and CVE-2026-48714 hit the npm ecosystem's dominant internationalisation library. Both scored CVSS 9.1. The second vulnerability bypassed the fix
June 26, 2026
Three VPN Vendors Breached in One Month. The Perimeter Has Collapsed.
FortiNet, Palo Alto, Check Point: three vendors, three vectors, one structural conclusion in June 2026.
June 23, 2026
Related vulnerabilities