Rezultati pretraživanja za 'Proizvođač: zeit'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-94544 | 4.2 | Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills for the same key are shared without separating Draft Mode requests from regular requests. An overlapping regular request can rece | 2026-10-05 21:16:38 | 2026-10-02 16:16:52 |
| CVE-2026-94484 | 4.8 | Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response ca | 2026-10-05 20:17:28 | 2026-10-02 16:16:51 |
| CVE-2026-103004 | 5.3 | Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with different root params. With Cache Components enabled (cacheComponents: true), a 'use cache' function that calls an | 2026-10-05 15:01:42 | 2026-10-01 15:17:25 |
| CVE-2026-94543 | 5.3 | Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache e | 2026-10-05 15:01:31 | 2026-10-02 16:16:52 |
| CVE-2026-94486 | 5.4 | Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited b | 2026-10-05 14:58:14 | 2026-10-02 16:16:51 |
| CVE-2026-94485 | 5.3 | Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the `next dev` development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited | 2026-10-05 14:57:42 | 2026-10-02 16:16:51 |
| CVE-2026-94483 | 6.5 | Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized image fetch | 2026-10-05 14:56:06 | 2026-10-02 16:16:51 |
| CVE-2026-45109 | 7.5 | Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing CVE-2026-44575 did not apply to middleware.ts with Turbopack. This vulnerability is fixed in 15.5.18 | 2026-08-13 13:19:05 | 2026-05-13 18:16:19 |
| CVE-2026-44579 | 7.5 | Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering through the Cache Components feature can be vulnerable to connection exhaustion through crafted POST re | 2026-08-13 13:19:04 | 2026-05-13 18:16:18 |
| CVE-2026-44578 | 8.6 | Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to server-side request forgery through crafted WebSocket up | 2026-08-13 13:19:04 | 2026-05-13 18:16:17 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/8
Zapisa po stranici: