Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

next

npm

The React Framework

View on github.com · View on npmjs.org

Security Advisories for next in npm

Moderate
2 months ago

Next.js Affected by Cache Key Confusion for Image Optimization API Routes GSA_kwCzR0hTQS1nNXFnLTcycXctZ3c1ds4ABLk_

npm next
Moderate
2 months ago

Next.js Content Injection Vulnerability for Image Optimization GSA_kwCzR0hTQS14djU3LTRtcjktd2c4ds4ABLk-

npm next
Moderate
2 months ago

Next.js Improper Middleware Redirect Handling Leads to SSRF GSA_kwCzR0hTQS00MzQyLXg3MjMtY2gyZs4ABLk9

npm next
High
4 months ago

Next.JS vulnerability can lead to DoS via cache poisoning GSA_kwCzR0hTQS02N3JyLTg0eG0tNGM3cs4ABJr3

npm next
Low
4 months ago

Next.js has a Cache poisoning vulnerability due to omission of the Vary header GSA_kwCzR0hTQS1yMmZjLWNjcjgtOTZjNM4ABJr2

npm next
Low
5 months ago

Information exposure in Next.js dev server due to lack of origin verification GSA_kwCzR0hTQS0zaDUyLTI2OXAtY3A5cs4ABIet

npm next
Low
6 months ago

Next.js Race Condition to Cache Poisoning GSA_kwCzR0hTQS1xcGp2LXY1OXgtM3FjNM4ABH4w

npm next
Low
7 months ago

Next.js may leak x-middleware-subrequest-id to external hosts GSA_kwCzR0hTQS0yMjNqLTRybTgtbXJtZs4ABGV7

npm next
Critical
8 months ago

Authorization Bypass in Next.js Middleware GSA_kwCzR0hTQS1mODJ2LWp3cjUtbWZmd84ABFxH

npm next
Moderate
10 months ago

Next.js Allows a Denial of Service (DoS) with Server Actions GSA_kwCzR0hTQS03bTI3LTdnaGMtNDR3Oc4ABC8r

npm next
High
11 months ago

Next.js authorization bypass vulnerability GSA_kwCzR0hTQS03Z2ZjLThjcTgtamg1Zs4ABChV

npm next
Moderate
about 1 year ago

Denial of Service condition in Next.js image optimization GSA_kwCzR0hTQS1nNzd4LTQ0eHgtNTMybc4ABAQO

npm next
High
about 1 year ago

Next.js Cache Poisoning GSA_kwCzR0hTQS1ncDhmLThtM2ctcXZqOc4AA_nS

npm next
High
over 1 year ago

Next.js Denial of Service (DoS) condition GSA_kwCzR0hTQS1mcTU0LTJqNTItamM0Ms4AA9w6

npm next
High
over 1 year ago

Next.js Server-Side Request Forgery in Server Actions GSA_kwCzR0hTQS1mcjVoLXJxcDgtbWo2Z84AA74P

npm next
High
over 1 year ago

Next.js Vulnerable to HTTP Request Smuggling GSA_kwCzR0hTQS03N3I1LWd3M2otMm1wZs4AA74O

npm next
Low
about 2 years ago

Next.js missing cache-control header may lead to CDN caching empty reply GSA_kwCzR0hTQS1jNTloLXI2cDgtcTl3Y84AA2m9

npm next
Moderate
about 3 years ago

Unexpected server crash in Next.js GSA_kwCzR0hTQS13ZmY0LWZwd2ctcXF2M84AAui2

npm next
Moderate
over 3 years ago

Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0 GSA_kwCzR0hTQS1mbXZtLXg4bXYtNDdtas0s0Q

npm next
Moderate
almost 4 years ago

Denial of Service Vulnerability in next.js GSA_kwCzR0hTQS13cjY2LXZyd20tNWc1eM0nOg

npm next
High
almost 4 years ago

Unexpected server crash in Next.js. GSA_kwCzR0hTQS0yNW1wLWc2ZnYtbXF4eM0ZPg

npm next
High
about 4 years ago

XSS in Image Optimization API for Next.js MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlncjMtNzg5Ny1wcDdt

npm next
Moderate
about 4 years ago

Open Redirect in Next.js MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ4ZjUtd3h3cC1tN2c5

npm next
Moderate
about 5 years ago

Open Redirect in Next.js versions MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXg1NnAtYzhjZy1xNDM1

npm next
High
about 5 years ago

Remote Code Execution in next MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV2ajgtM3YyaC1oMzh2

npm next
Moderate
over 5 years ago

Directory Traversal in Next.js MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZxNzctN3A3ci04M3Jq

npm next
Moderate
about 7 years ago

Next.js has cross site scripting (XSS) vulnerability via the 404 or 500 /_error page MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXF3OTYtbW0yZy1jOG03

npm next
High
almost 8 years ago

Directory traversal vulnerability in Next.js MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW0zNHgtd2dyaC1nODk3

npm next
High
almost 8 years ago

Next.js Directory Traversal Vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNmNWMtNHF4ai12bXBm

npm next

Filter by Severity

Moderate 12 High 11 Low 5 Critical 1