Skip to content

v3.28.0

Choose a tag to compare

@goklab goklab released this 25 Jun 19:10

Daily intel: 1 new rule. VG1097 — i18next missing-key prototype pollution (CVE-2026-48713 i18next-fs-backend < 2.6.6, CVE-2026-48714 i18next-http-middleware < 3.9.7, both critical, published 2026-06-25). Distinct from the existing i18next-http-backend path-traversal rule. 0-FP semver (caret on the current major and tilde within the fixed minor resolve to the patch). 451 rules / 39 tools / 78 CVE rules. 16 tests.