Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/next@12.1.0
Typenpm
Namespace
Namenext
Version12.1.0
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version13.4.20-canary.0
Latest_non_vulnerable_version16.1.5
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-4uam-3y96-wub1
vulnerability_id VCID-4uam-3y96-wub1
summary Next.js is vulnerable to User Interface (UI) Misrepresentation of Critical Information. In order to be affected, the `next.config.js` file must have an `images.domains` array assigned and the image host assigned in `images.domains` must allow user-provided SVG. If the `next.config.js` file has `images.loader` assigned to something other than default, the instance is not affected. As a workaround, change `next.config.js` to use a different `loader configuration` other than the default.
references
0
reference_url https://github.com/vercel/next.js/releases/tag/v12.1.0
reference_id
reference_type
scores
url https://github.com/vercel/next.js/releases/tag/v12.1.0
1
reference_url https://github.com/advisories/GHSA-fmvm-x8mv-47mj
reference_id GHSA-fmvm-x8mv-47mj
reference_type
scores
url https://github.com/advisories/GHSA-fmvm-x8mv-47mj
2
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-fmvm-x8mv-47mj
reference_id GHSA-fmvm-x8mv-47mj
reference_type
scores
url https://github.com/vercel/next.js/security/advisories/GHSA-fmvm-x8mv-47mj
fixed_packages
0
url pkg:npm/next@12.1.0
purl pkg:npm/next@12.1.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@12.1.0
aliases CVE-2022-23646, GHSA-fmvm-x8mv-47mj
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4uam-3y96-wub1
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/next@12.1.0