Vercel Next.js

Meta React Server Components Remote Code Execution Vulnerability

In CISA KEVRansomwarealso in 4 other products

Next.js: Server-side request forgery in applications using WebSocket upgrades

Authorization Bypass in Next.js Middleware

Meta React-server-dom-webpack: Deserialization of Untrusted Data

also in 5 other products

Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

Meta React-server-dom-parcel: Deserialization of Untrusted Data

also in 4 other products

Cache Poisoning in next.js

Meta React-server-dom-webpack: Information Disclosure

also in 4 other products

Unexpected server crash in Next.js

Next.js Server-Side Request Forgery in Server Actions

Authorization bypass in Next.js

Next.js Improper Middleware Redirect Handling Leads to SSRF

Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes

Meta React-server-dom-turbopack: Uncontrolled Resource Consumption

also in 4 other products

Satori-generated SVG has improper escaping

also in 1 other product

Next.js: Denial of Service in App Router using Server Actions

Vercel Next.js: Denial of Service

Librsvg: use-after-free when xml includes have duplicated entities

also in 11 other products

DOS Vulnerability in next.js

Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Next.js DoS vulnerability via cache poisoning

Next.js: Middleware / Proxy bypass in Pages Router applications using i18n

Next.js Vulnerable to HTTP Request Smuggling

Improper CSP in Image Optimization API for Next.js

Next.js: Denial of Service via connection exhaustion in applications using Cache Components