Rezultati pretraživanja za 'Proizvođač: zeit'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-27979 | - | Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, a request containing the `next-resume: 1` header (corresponding with a PPR resume request) would buffer request bodies with | 2026-03-18 01:16:04 | 2026-03-18 01:16:04 |
| CVE-2026-27978 | - | Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, `origin: null` was treated as a "missing" origin during Server Action CSRF validation. As a result, requests from opaque co | 2026-03-18 01:16:04 | 2026-03-18 00:16:20 |
| CVE-2026-27977 | - | Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, in `next dev`, cross-site protection for internal websocket endpoints could treat `Origin: null` as a bypass case even if ` | 2026-03-18 01:16:03 | 2026-03-18 00:16:19 |
| CVE-2025-59472 | 5.9 | A denial of service vulnerability exists in Next.js versions with Partial Prerendering (PPR) enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the `Next-Resume: 1` header and processes attacker-c | 2026-02-24 18:24:35 | 2026-01-26 22:15:53 |
| CVE-2025-59471 | 5.9 | A denial of service vulnerability exists in self-hosted Next.js applications that have `remotePatterns` configured for the Image Optimizer. The image optimization endpoint (`/_next/image`) loads external images entirely into memory without enforcing | 2026-02-13 15:03:20 | 2026-01-26 22:15:52 |
| CVE-2025-13984 | 6.1 | Permissive Cross-domain Security Policy with Untrusted Domains vulnerability in Drupal Next.Js allows Cross-Site Scripting (XSS).This issue affects Next.Js: from 0.0.0 before 1.6.4, from 2.0.0 before 2.0.1. | 2026-02-06 19:02:43 | 2026-01-28 20:16:07 |
| CVE-2025-55184 | 7.5 | A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react | 2025-12-15 17:15:53 | 2025-12-11 20:16:00 |
| CVE-2025-55183 | 5.3 | An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, a | 2025-12-12 18:18:19 | 2025-12-11 20:16:00 |
| CVE-2025-67779 | 7.5 | It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial of service attack in a specific case. React Server Components versions 19.0.2, 19.1.3 and 19.2.2 are affected, allowing unsafe | 2025-12-12 00:15:46 | 2025-12-12 00:15:46 |
| CVE-2025-55182 | 10.0 | A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack | 2025-12-06 02:00:02 | 2025-12-03 16:15:56 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/8
Zapisa po stranici: