Search for packages
| purl | pkg:npm/next@15.5.16 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-5wd7-tyx3-8qgx | Next.js vulnerable to cache poisoning via collisions in React Server Component cache-busting |
CVE-2026-44582
GHSA-vfv6-92ff-j949 |
| VCID-6xdp-rz4p-7yg6 | Next.js vulnerable to cross-site scripting in App Router applications using CSP nonces |
CVE-2026-44581
GHSA-ffhc-5mcf-pf4q |
| VCID-8yw2-detr-3fbv | Next.js vulnerable to cache poisoning in React Server Component responses |
CVE-2026-44576
GHSA-wfc6-r584-vfw7 |
| VCID-b9ar-1t6z-63dy | Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n |
CVE-2026-44573
GHSA-36qx-fr4f-26g5 |
| VCID-bjap-g93e-a7fj | Next.js's Middleware / Proxy redirects can be cache-poisoned |
CVE-2026-44572
GHSA-3g8h-86w9-wvmq |
| VCID-e99q-bmqs-4fcy | Next.js has cross-site scripting in beforeInteractive scripts with untrusted input |
CVE-2026-44580
GHSA-gx5p-jg67-6x7h |
| VCID-g8w6-qujv-dkdj | Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades |
CVE-2026-44578
GHSA-c4j6-fc7j-m34r |
| VCID-grnz-75dr-zbb6 | Next.js has a Denial of Service in the Image Optimization API |
CVE-2026-44577
GHSA-h64f-5h5j-jqjh |
| VCID-hv3p-7mme-a7fe | Next.js vulnerable to Denial of Service via connection exhaustion in applications using Cache Components |
CVE-2026-44579
GHSA-mg66-mrh9-m8jx |
| VCID-ud4r-dcsg-hkac | Next.js has a Middleware / Proxy bypass through dynamic route parameter injection |
CVE-2026-44574
GHSA-492v-c6pp-mqqv |
| VCID-wq4q-a494-cbd3 | Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes |
CVE-2026-44575
GHSA-267c-6grr-h53f |
| VCID-xvnz-xwyq-kqdu | Next.js Vulnerable to Denial of Service with Server Components |
GHSA-8h8q-6873-q5fj
|