Rezultati pretraživanja za 'Proizvođač: zeit'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-32421 | 3.7 | Next.js is a React framework for building full-stack web applications. Versions prior to 14.2.24 and 15.1.6 have a race-condition vulnerability. This issue only affects the Pages Router under certain misconfigurations, causing normal endpoints to ser | 2025-09-10 15:16:10 | 2025-05-14 23:15:47 |
| CVE-2025-30218 | 5.9 | Next.js is a React framework for building full-stack web applications. To mitigate CVE-2025-29927, Next.js validated the x-middleware-subrequest-id which persisted across multiple incoming requests. However, this subrequest ID is sent to all requests | 2025-09-10 15:14:08 | 2025-04-02 22:15:19 |
| CVE-2025-57752 | 6.2 | Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization API routes are affected by cache key confusion. When images returned from API routes vary b | 2025-09-08 16:43:50 | 2025-08-29 22:15:31 |
| CVE-2025-55173 | 4.3 | Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization is vulnerable to content injection. The issue allowed attacker-controlled external image so | 2025-09-08 16:42:57 | 2025-08-29 22:15:31 |
| CVE-2025-57822 | 6.5 | Next.js is a React framework for building full-stack web applications. Prior to versions 14.2.32 and 15.4.7, when next() was used without explicitly passing the request object, it could lead to SSRF in self-hosted applications that incorrectly forwar | 2025-09-08 16:41:41 | 2025-08-29 22:15:32 |
| CVE-2024-47831 | 7.5 | Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service (DoS) condition which c | 2024-11-08 15:39:21 | 2024-10-14 18:15:05 |
| CVE-2021-43803 | 4.3 | Next.js is a React framework. In versions of Next.js prior to 12.0.5 or 11.1.3, invalid or malformed URLs could lead to a server crash. In order to be affected by this issue, the deployment must use Next.js versions above 11.1.0 and below 12.0.5, Nod | 2024-03-12 16:03:46 | 2021-12-10 00:15:11 |
| CVE-2017-16877 | 5.0 | ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information. | 2023-12-07 22:15:07 | 2017-11-17 17:29:00 |
| CVE-2022-21721 | 4.3 | Next.js is a React framework. Starting with version 12.0.0 and prior to version 12.0.9, vulnerable code could allow a bad actor to trigger a denial of service attack for anyone using i18n functionality. In order to be affected by this CVE, one must u | 2023-07-24 13:52:00 | 2022-01-28 22:15:00 |
| CVE-2018-3718 | 5.0 | serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded. | 2023-02-28 18:08:00 | 2018-06-07 02:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/8
Zapisa po stranici: