Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zeit'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-64643 5.3 Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, Next.js applications using App Router, Server Actions (use server) or use cache endpoints can be disclosed bypassing 2026-07-29 14:37:25
CVE-2026-64642 8.2 Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass midd 2026-07-29 14:36:59
CVE-2026-64641 7.5 Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessi 2026-07-29 14:36:32
CVE-2026-44572 3.7 Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, an external client could send a x-nextjs-data header on a normal request to a path handled by middleware that returns a redirect. When th 2026-05-15 15:46:08
CVE-2026-44580 6.1 Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be vulnerable to cross-site scripting. In affected ve 2026-05-14 18:33:34
CVE-2026-44581 4.7 Next.js is a React framework for building full-stack web applications. From 13.4.0 to before 15.5.16 and 16.2.5, App Router applications that rely on CSP nonces can be vulnerable to stored cross-site scripting when deployed behind shared caches. In a 2026-05-14 18:30:24
CVE-2026-44582 3.7 Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 and 16.2.5, React Server Component responses can be vulnerable to cache poisoning in deployments that rely on shared caches with insufficient respons 2026-05-14 18:15:03
CVE-2026-44576 5.4 Next.js is a React framework for building full-stack web applications. From 14.2.0 to before 15.5.16 and 16.2.5, applications using React Server Components can be vulnerable to cache poisoning when shared caches do not correctly partition response va 2026-05-14 13:44:18
CVE-2026-29057 - Next.js is a React framework for building full-stack web applications. Starting in version 9.5.0 and prior to versions 15.5.13 and 16.1.7, when Next.js rewrites proxy traffic to an external backend, a crafted `DELETE`/`OPTIONS` request using `Transfe 2026-03-18 01:16:05
CVE-2026-27980 - Next.js is a React framework for building full-stack web applications. Starting in version 10.0.0 and prior to version 16.1.7, the default Next.js image optimization disk cache (`/_next/image`) did not have a configurable upper bound, allowing unboun 2026-03-18 01:16:04
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/8
Zapisa po stranici: