i18next

i18next internationalization framework

Latest 26.4.4

92%

Total Score

healthy

Long-running, actively maintained project with strong documentation and security practices; workflow action pinning is the main hygiene gap.

Are you affected? Scan for Free

Health Score Breakdown

Lifecycle scripts

A prepare install-time script is present, which adds some installation complexity and supply-chain exposure, though the package has no runtime dependencies and the broader project evidence is strong.

Workflow audit

Both workflows were analyzed with no untrusted checkouts or script injection, and one scopes permissions at job level. All 13 action references are unpinned, creating a caution, while the lone low-confidence cache-poisoning finding is hygiene rather than a decisive risk.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-387296 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. i18next is vulnerable to Prototype Pollution in versions 2.0.0 - 26.3.3.	2.0.0 - 26.3.3	Medium
AIKIDO-2026-10645 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. i18next is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 2.0.0-alpha.24 - 26.0.5.	2.0.0-alpha.24 - 26.0.5	Medium
AIKIDO-2024-10543 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. i18next is vulnerable to Code Injection in versions 17.0.2 - 24.1.1.	17.0.2 - 24.1.1	High
CVE-2017-16008 i18next is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.10.2.	0.0.0 - 1.10.2	Medium
CVE-2017-16010 i18next is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 2.0.0 - 3.4.4.	2.0.0 - 3.4.4	Medium