CVE-2026-40299
1 advisory.
npm/next-intl CVE-2026-40299: medium
next-intl has an open redirect vulnerability
Action: Upgrade next-intl to 4.9.1 or later.
npm i next-intl@4.9.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.9.1 | - |
Fixed versions
| 4.9.1 |
Sources
- osv: GHSA-8f24-v5vv-gm5j
- https://github.com/amannn/next-intl/security/advisories/GHSA-8f24-v5vv-gm5j
- https://nvd.nist.gov/vuln/detail/CVE-2026-40299
- https://github.com/amannn/next-intl/pull/2304
- https://github.com/amannn/next-intl/commit/1c80b668aa6d853f470319eec10a3f61e78a70e6
- https://github.com/amannn/next-intl
- https://github.com/amannn/next-intl/releases/tag/v4.9.1
CVE-2026-40299 · published · modified · JSON