Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zeit'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-44577 5.9 Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enf 2026-08-13 13:19:03
CVE-2026-44575 7.5 Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on middleware or proxy-based checks for authorization can allow unauthorized access through transport-s 2026-08-13 13:19:03
CVE-2026-44574 8.1 Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware to protect dynamic routes can be vulnerable to authorization bypass. In affected deployments, specia 2026-08-13 13:19:03
CVE-2026-44573 7.5 Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router with i18n configured and middleware/proxy-based authorization can allow unauthorized access to protec 2026-08-13 13:19:03
CVE-2026-64644 5.3 Next.js is a React framework for building full-stack web applications. In versions 15.5.0 through 15.5.20 and 16.0.0 through 16.2.10, when self-hosting Next.js with the default image loader, the Image Optimization API can optimize remotely hosted ima 2026-07-29 14:39:23
CVE-2026-64645 6.1 Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a rewrites() or redirects() rule that builds its external destination hostname from request-controlled input can be 2026-07-29 14:39:12
CVE-2026-64646 5.3 Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memor 2026-07-29 14:39:00
CVE-2026-64647 5.4 Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may return a cached response body from a different request to the same URL b 2026-07-29 14:38:45
CVE-2026-64648 5.4 Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may return a cached response body from a different request to the same URL 2026-07-29 14:38:20
CVE-2026-64649 6.5 Next.js is a React framework for building full-stack web applications. In versions 14.1.1 through 15.5.20 and 16.0.0 through 16.2.10, when a Server Action forwards or redirects a request, an attacker can cause the server to send that outbound request 2026-07-29 14:38:03
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/8
Zapisa po stranici: