Rezultati pretraživanja za 'Proizvođač: zeit'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-49005 | 3.7 | Next.js is a React framework for building full-stack web applications. In Next.js App Router from 15.3.0 to before 15.3.3 and Vercel CLI from 41.4.1 to 42.2.0, a cache poisoning vulnerability was found. The issue allowed page requests for HTML conten | 2025-09-10 19:14:45 | 2025-07-03 21:15:26 |
| CVE-2025-29927 | 9.1 | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorizat | 2025-09-10 15:49:40 | 2025-03-21 15:15:42 |
| CVE-2024-56332 | 5.3 | Next.js is a React framework for building full-stack web applications. Starting in version 13.0.0 and prior to versions 13.5.8, 14.2.21, and 15.1.2, Next.js is vulnerable to a Denial of Service (DoS) attack that allows attackers to construct requests | 2025-09-10 15:48:41 | 2025-01-03 21:15:13 |
| CVE-2024-51479 | 7.5 | Next.js is a React framework for building full-stack web applications. In affected versions if a Next.js application is performing authorization in middleware based on pathname, it was possible for this authorization to be bypassed for pages directly | 2025-09-10 15:48:08 | 2024-12-17 19:15:06 |
| CVE-2024-46982 | 7.5 | Next.js is a React framework for building full-stack web applications. By sending a crafted HTTP request, it is possible to poison the cache of a non-dynamic server-side rendered route in the pages router (this does not affect the app router). When t | 2025-09-10 15:46:05 | 2024-09-17 22:15:02 |
| CVE-2024-39693 | 7.5 | Next.js is a React framework. A Denial of Service (DoS) condition was identified in Next.js. Exploitation of the bug can trigger a crash, affecting the availability of the server. his vulnerability was resolved in Next.js 13.5 and later. | 2025-09-10 15:44:17 | 2024-07-10 20:15:04 |
| CVE-2024-34351 | 7.5 | Next.js is a React framework that can provide building blocks to create web applications. A Server-Side Request Forgery (SSRF) vulnerability was identified in Next.js Server Actions. If the `Host` header is modified, and the below conditions are also | 2025-09-10 15:43:33 | 2024-05-14 15:38:42 |
| CVE-2024-34350 | 7.5 | Next.js is a React framework that can provide building blocks to create web applications. Prior to 13.5.1, an inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by | 2025-09-10 15:36:59 | 2024-05-14 15:38:41 |
| CVE-2025-49826 | 7.5 | Next.js is a React framework for building full-stack web applications. From versions 15.0.4-canary.51 to before 15.1.8, a cache poisoning bug leading to a Denial of Service (DoS) condition was found in Next.js. This issue does not impact customers ho | 2025-09-10 15:28:32 | 2025-07-03 21:15:27 |
| CVE-2025-48068 | 4.3 | Next.js is a React framework for building full-stack web applications. In versions starting from 13.0 to before 14.2.30 and 15.0.0 to before 15.2.2, Next.js may have allowed limited source code exposure when the dev server was running with the App Ro | 2025-09-10 15:17:38 | 2025-05-30 04:15:48 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/8
Zapisa po stranici: