Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/next@16.2.6
purl pkg:npm/next@16.2.6
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-64jf-ybea-yugs Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up CVE-2026-45109
GHSA-26hh-7cqf-hhc6

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-13T18:36:32.045940+00:00 GithubOSV Importer Fixing VCID-64jf-ybea-yugs https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-26hh-7cqf-hhc6/GHSA-26hh-7cqf-hhc6.json 38.6.0
2026-05-12T18:39:03.834299+00:00 GHSA Importer Fixing VCID-64jf-ybea-yugs https://github.com/advisories/GHSA-26hh-7cqf-hhc6 38.6.0