Known Vulnerabilities in Next.js

Show more ↓



Authorization bypass in Next.js21 Mar, 2025
High Patched Public exploit
Authorization bypass in Next.js21 Jan, 2025
Medium Patched
Denial of service in Next.js21 Jan, 2025
Medium Patched
Cache poisoning in Next.js18 Sep, 2024
Medium Patched
Denial of service in Next.js11 Jul, 2024
Medium Patched
Server-side request forgery in Next.js Server Actions10 May, 2024
Medium Patched Public exploit
HTTP request smuggling in Next.js10 May, 2024
Medium Patched
Denial of service in Next.js24 Aug, 2022
Low Patched
Spoofing attack in Next.js17 Feb, 2022
Medium Patched
Denial of service in Next.js28 Jan, 2022
Medium Patched
Denial of service in Next.js06 Dec, 2021
Medium Patched
Cross-site scripting in Next.js01 Sep, 2021
Low Patched
Open redirect in Next.js09 Oct, 2020
Low Patched
Path traversal in Next.js31 Mar, 2020
Medium Patched
Cross-site scripting in Next.js14 Oct, 2018
Low Patched
Path traversal in Zeit Next.js24 Jan, 2018
Medium Patched
Path traversal in Zeit Next.js17 Nov, 2017
Medium Patched
Directory traversal in Next.js 2.002 Jun, 2017
Medium Patched