CVE-2026-41691 | i18next i18next-http-backend up to 3.0.4 Control Character path traversal (GHSA-q89c-q3h5-w34g)

A vulnerability labeled as critical has been found in i18next i18next-http-backend up to 3.0.4. This vulnerability affects unknown code of the component Control Character Handler. The manipulation results in path traversal.

This vulnerability is known as CVE-2026-41691. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.