{"action":"Upgrade i18next-fs-backend to 2.6.4 or later.","affected":[{"fixed":"2.6.4","introduced":"0"}],"component":"i18next-fs-backend","cve_ids":["CVE-2026-41693"],"ecosystem":"npm","epss":0.00292,"exploited":false,"fixed_versions":["2.6.4"],"ghsa_id":"GHSA-8847-338w-5hcj","id":"tcs_01M5KFC6TH3V6BV43HFARRRYH8","modified_at":"2026-05-13T13:50:03.856476Z","published_at":"2026-04-22T17:43:14Z","references":["https://osv.dev/vulnerability/GHSA-8847-338w-5hcj","https://github.com/i18next/i18next-fs-backend/security/advisories/GHSA-8847-338w-5hcj","https://nvd.nist.gov/vuln/detail/CVE-2026-41693","https://github.com/i18next/i18next-fs-backend"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-8847-338w-5hcj","url":"https://osv.dev/vulnerability/GHSA-8847-338w-5hcj"}],"summary":"i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite"}