Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/next@15.2.0-canary.24
Typenpm
Namespace
Namenext
Version15.2.0-canary.24
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version15.5.18
Latest_non_vulnerable_version16.2.6
Affected_by_vulnerabilities
0
url VCID-29qk-jgck-2kb2
vulnerability_id VCID-29qk-jgck-2kb2
summary 
A denial of service vulnerability exists in self-hosted Next.js applications that have `remotePatterns` configured for the Image Optimizer. The image optimization endpoint (`/_next/image`) loads external images entirely into memory without enforcing a maximum size limit, allowing an attacker to cause out-of-memory conditions by requesting optimization of arbitrarily large images. This vulnerability requires that `remotePatterns` is configured to allow image optimization from external domains and that the attacker can serve or control a large image on an allowed domain.

Strongly consider upgrading to 15.5.10 or 16.1.5 to reduce risk and prevent availability issues in Next applications.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-59471.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-59471.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-59471
reference_id
reference_type
scores
0
value 0.00041
scoring_system epss
scoring_elements 0.13017
published_at 2026-06-12T12:55:00Z
1
value 0.00041
scoring_system epss
scoring_elements 0.12923
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-59471
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://github.com/vercel/next.js/commit/500ec83743639addceaede95e95913398975156c
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/commit/500ec83743639addceaede95e95913398975156c
4
reference_url https://github.com/vercel/next.js/commit/e5b834d208fe0edf64aa26b5d76dcf6a176500ec
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/commit/e5b834d208fe0edf64aa26b5d76dcf6a176500ec
5
reference_url https://github.com/vercel/next.js/releases/tag/v15.5.10
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v15.5.10
6
reference_url https://github.com/vercel/next.js/releases/tag/v16.1.5
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v16.1.5
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2433094
reference_id 2433094
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2433094
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-59471
reference_id CVE-2025-59471
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-59471
9
reference_url https://github.com/advisories/GHSA-9g9p-9gw9-jx7f
reference_id GHSA-9g9p-9gw9-jx7f
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9g9p-9gw9-jx7f
10
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-9g9p-9gw9-jx7f
reference_id GHSA-9g9p-9gw9-jx7f
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-27T14:54:47Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-9g9p-9gw9-jx7f
fixed_packages
0
url pkg:npm/next@15.5.10
purl pkg:npm/next@15.5.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wxy-d9mx-u7du
1
vulnerability VCID-4kgz-73xy-xyb2
2
vulnerability VCID-5ehn-67ys-73h1
3
vulnerability VCID-6r5c-d48p-9qa4
4
vulnerability VCID-93c9-up9w-5fdv
5
vulnerability VCID-9r3b-phvp-xfck
6
vulnerability VCID-b2hu-vcgt-7ydr
7
vulnerability VCID-bjvd-79eg-17f3
8
vulnerability VCID-gh18-cr6c-47hm
9
vulnerability VCID-haxf-nay6-v3hg
10
vulnerability VCID-uqrk-gg9y-5bfz
11
vulnerability VCID-w4pk-pmxb-c7fr
12
vulnerability VCID-wgv6-ermy-yycy
13
vulnerability VCID-xzrf-tsxp-hqeg
14
vulnerability VCID-yddv-cunp-yyd7
15
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.10
1
url pkg:npm/next@16.1.5
purl pkg:npm/next@16.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wxy-d9mx-u7du
1
vulnerability VCID-4kgz-73xy-xyb2
2
vulnerability VCID-51r9-nmc2-tyc7
3
vulnerability VCID-5ehn-67ys-73h1
4
vulnerability VCID-6r5c-d48p-9qa4
5
vulnerability VCID-93c9-up9w-5fdv
6
vulnerability VCID-9r3b-phvp-xfck
7
vulnerability VCID-b2hu-vcgt-7ydr
8
vulnerability VCID-bjvd-79eg-17f3
9
vulnerability VCID-chsk-ka34-yqaf
10
vulnerability VCID-gh18-cr6c-47hm
11
vulnerability VCID-haxf-nay6-v3hg
12
vulnerability VCID-qptg-e7c6-puhs
13
vulnerability VCID-uqrk-gg9y-5bfz
14
vulnerability VCID-w4pk-pmxb-c7fr
15
vulnerability VCID-wgv6-ermy-yycy
16
vulnerability VCID-xzrf-tsxp-hqeg
17
vulnerability VCID-yddv-cunp-yyd7
18
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.1.5
aliases CVE-2025-59471, GHSA-9g9p-9gw9-jx7f
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-29qk-jgck-2kb2
1
url VCID-2rsy-25vf-cufu
vulnerability_id VCID-2rsy-25vf-cufu
summary Next.js is vulnerable to RCE in React flight protocol
references
0
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 10.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-55182
reference_id CVE-2025-55182
reference_type
scores
0
value 10.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-55182
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-66478
reference_id CVE-2025-66478
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2025-66478
3
reference_url https://github.com/advisories/GHSA-9qr9-h5gf-34mp
reference_id GHSA-9qr9-h5gf-34mp
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9qr9-h5gf-34mp
4
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-9qr9-h5gf-34mp
reference_id GHSA-9qr9-h5gf-34mp
reference_type
scores
0
value 10.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/security/advisories/GHSA-9qr9-h5gf-34mp
5
reference_url https://github.com/vitejs/vite-plugin-react/security/advisories/GHSA-fmh4-wr37-44fp
reference_id GHSA-fmh4-wr37-44fp
reference_type
scores
0
value 10.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/vitejs/vite-plugin-react/security/advisories/GHSA-fmh4-wr37-44fp
6
reference_url https://github.com/facebook/react/security/advisories/GHSA-fv66-9v8q-g76r
reference_id GHSA-fv66-9v8q-g76r
reference_type
scores
0
value 10.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/facebook/react/security/advisories/GHSA-fv66-9v8q-g76r
fixed_packages
0
url pkg:npm/next@15.2.6
purl pkg:npm/next@15.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-51mc-n64v-nugj
4
vulnerability VCID-5ehn-67ys-73h1
5
vulnerability VCID-6r5c-d48p-9qa4
6
vulnerability VCID-93c9-up9w-5fdv
7
vulnerability VCID-9r3b-phvp-xfck
8
vulnerability VCID-b2hu-vcgt-7ydr
9
vulnerability VCID-bjvd-79eg-17f3
10
vulnerability VCID-c9sc-ajq2-pyda
11
vulnerability VCID-gh18-cr6c-47hm
12
vulnerability VCID-gm62-hv3y-v7b8
13
vulnerability VCID-haxf-nay6-v3hg
14
vulnerability VCID-uqrk-gg9y-5bfz
15
vulnerability VCID-wgv6-ermy-yycy
16
vulnerability VCID-xzrf-tsxp-hqeg
17
vulnerability VCID-yddv-cunp-yyd7
18
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.2.6
1
url pkg:npm/next@15.3.6
purl pkg:npm/next@15.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-51mc-n64v-nugj
4
vulnerability VCID-5ehn-67ys-73h1
5
vulnerability VCID-6r5c-d48p-9qa4
6
vulnerability VCID-93c9-up9w-5fdv
7
vulnerability VCID-9r3b-phvp-xfck
8
vulnerability VCID-b2hu-vcgt-7ydr
9
vulnerability VCID-bjvd-79eg-17f3
10
vulnerability VCID-c9sc-ajq2-pyda
11
vulnerability VCID-gh18-cr6c-47hm
12
vulnerability VCID-gm62-hv3y-v7b8
13
vulnerability VCID-haxf-nay6-v3hg
14
vulnerability VCID-uqrk-gg9y-5bfz
15
vulnerability VCID-wgv6-ermy-yycy
16
vulnerability VCID-xzrf-tsxp-hqeg
17
vulnerability VCID-yddv-cunp-yyd7
18
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.3.6
2
url pkg:npm/next@15.4.8
purl pkg:npm/next@15.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-51mc-n64v-nugj
4
vulnerability VCID-5ehn-67ys-73h1
5
vulnerability VCID-6r5c-d48p-9qa4
6
vulnerability VCID-93c9-up9w-5fdv
7
vulnerability VCID-9r3b-phvp-xfck
8
vulnerability VCID-b2hu-vcgt-7ydr
9
vulnerability VCID-bjvd-79eg-17f3
10
vulnerability VCID-c9sc-ajq2-pyda
11
vulnerability VCID-gh18-cr6c-47hm
12
vulnerability VCID-gm62-hv3y-v7b8
13
vulnerability VCID-haxf-nay6-v3hg
14
vulnerability VCID-uqrk-gg9y-5bfz
15
vulnerability VCID-w4pk-pmxb-c7fr
16
vulnerability VCID-wgv6-ermy-yycy
17
vulnerability VCID-xzrf-tsxp-hqeg
18
vulnerability VCID-yddv-cunp-yyd7
19
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.4.8
3
url pkg:npm/next@15.5.7
purl pkg:npm/next@15.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-51mc-n64v-nugj
4
vulnerability VCID-5ehn-67ys-73h1
5
vulnerability VCID-6r5c-d48p-9qa4
6
vulnerability VCID-93c9-up9w-5fdv
7
vulnerability VCID-9r3b-phvp-xfck
8
vulnerability VCID-b2hu-vcgt-7ydr
9
vulnerability VCID-bjvd-79eg-17f3
10
vulnerability VCID-c9sc-ajq2-pyda
11
vulnerability VCID-gh18-cr6c-47hm
12
vulnerability VCID-gm62-hv3y-v7b8
13
vulnerability VCID-haxf-nay6-v3hg
14
vulnerability VCID-uqrk-gg9y-5bfz
15
vulnerability VCID-w4pk-pmxb-c7fr
16
vulnerability VCID-wgv6-ermy-yycy
17
vulnerability VCID-xzrf-tsxp-hqeg
18
vulnerability VCID-yddv-cunp-yyd7
19
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.7
4
url pkg:npm/next@15.6.0-canary.0
purl pkg:npm/next@15.6.0-canary.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-51mc-n64v-nugj
2
vulnerability VCID-c9sc-ajq2-pyda
3
vulnerability VCID-gm62-hv3y-v7b8
4
vulnerability VCID-v7dq-7t8n-j7b5
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.6.0-canary.0
5
url pkg:npm/next@16.0.7
purl pkg:npm/next@16.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-51mc-n64v-nugj
4
vulnerability VCID-51r9-nmc2-tyc7
5
vulnerability VCID-5ehn-67ys-73h1
6
vulnerability VCID-6r5c-d48p-9qa4
7
vulnerability VCID-93c9-up9w-5fdv
8
vulnerability VCID-9r3b-phvp-xfck
9
vulnerability VCID-b2hu-vcgt-7ydr
10
vulnerability VCID-bjvd-79eg-17f3
11
vulnerability VCID-c9sc-ajq2-pyda
12
vulnerability VCID-chsk-ka34-yqaf
13
vulnerability VCID-gh18-cr6c-47hm
14
vulnerability VCID-gm62-hv3y-v7b8
15
vulnerability VCID-haxf-nay6-v3hg
16
vulnerability VCID-qptg-e7c6-puhs
17
vulnerability VCID-uqrk-gg9y-5bfz
18
vulnerability VCID-v7dq-7t8n-j7b5
19
vulnerability VCID-w4pk-pmxb-c7fr
20
vulnerability VCID-wgv6-ermy-yycy
21
vulnerability VCID-xzrf-tsxp-hqeg
22
vulnerability VCID-yddv-cunp-yyd7
23
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.0.7
6
url pkg:npm/next@16.1.0-canary.0
purl pkg:npm/next@16.1.0-canary.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-51mc-n64v-nugj
4
vulnerability VCID-51r9-nmc2-tyc7
5
vulnerability VCID-5ehn-67ys-73h1
6
vulnerability VCID-6r5c-d48p-9qa4
7
vulnerability VCID-93c9-up9w-5fdv
8
vulnerability VCID-9r3b-phvp-xfck
9
vulnerability VCID-b2hu-vcgt-7ydr
10
vulnerability VCID-bjvd-79eg-17f3
11
vulnerability VCID-c9sc-ajq2-pyda
12
vulnerability VCID-chsk-ka34-yqaf
13
vulnerability VCID-gh18-cr6c-47hm
14
vulnerability VCID-gm62-hv3y-v7b8
15
vulnerability VCID-haxf-nay6-v3hg
16
vulnerability VCID-qptg-e7c6-puhs
17
vulnerability VCID-uqrk-gg9y-5bfz
18
vulnerability VCID-v7dq-7t8n-j7b5
19
vulnerability VCID-w4pk-pmxb-c7fr
20
vulnerability VCID-wgv6-ermy-yycy
21
vulnerability VCID-xzrf-tsxp-hqeg
22
vulnerability VCID-yddv-cunp-yyd7
23
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.1.0-canary.0
aliases CVE-2025-66478, GHSA-9qr9-h5gf-34mp
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2rsy-25vf-cufu
2
url VCID-2wxy-d9mx-u7du
vulnerability_id VCID-2wxy-d9mx-u7du
summary Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router with i18n configured and middleware/proxy-based authorization can allow unauthorized access to protected page data through locale-less /_next/data/<buildId>/<page>.json requests. In affected configurations, middleware does not run for the unprefixed data route, allowing an attacker to retrieve SSR JSON for protected pages without passing the intended authorization checks. This vulnerability is fixed in 15.5.16 and 16.2.5.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44573.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44573.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-44573
reference_id
reference_type
scores
0
value 0.00052
scoring_system epss
scoring_elements 0.16872
published_at 2026-06-12T12:55:00Z
1
value 0.00052
scoring_system epss
scoring_elements 0.16723
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-44573
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://github.com/vercel/next.js/releases/tag/v15.5.16
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v15.5.16
4
reference_url https://github.com/vercel/next.js/releases/tag/v16.2.5
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v16.2.5
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-44573
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-44573
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2477199
reference_id 2477199
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2477199
7
reference_url https://github.com/advisories/GHSA-36qx-fr4f-26g5
reference_id GHSA-36qx-fr4f-26g5
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-36qx-fr4f-26g5
8
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5
reference_id GHSA-36qx-fr4f-26g5
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-13T18:10:30Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5
fixed_packages
0
url pkg:npm/next@15.5.16
purl pkg:npm/next@15.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.16
1
url pkg:npm/next@16.2.5
purl pkg:npm/next@16.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.2.5
aliases CVE-2026-44573, GHSA-36qx-fr4f-26g5
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2wxy-d9mx-u7du
3
url VCID-4kgz-73xy-xyb2
vulnerability_id VCID-4kgz-73xy-xyb2
summary Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be vulnerable to cross-site scripting. In affected versions, serialized script content was not escaped safely before being embedded into the document, which could allow attacker-controlled input to break out of the intended script context and execute arbitrary JavaScript in a visitor's browser. This vulnerability is fixed in 15.5.16 and 16.2.5.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-44580
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01922
published_at 2026-06-12T12:55:00Z
1
value 0.00012
scoring_system epss
scoring_elements 0.01918
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-44580
1
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
2
reference_url https://github.com/vercel/next.js/releases/tag/v15.5.16
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v15.5.16
3
reference_url https://github.com/vercel/next.js/releases/tag/v16.2.5
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v16.2.5
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-44580
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-44580
5
reference_url https://github.com/advisories/GHSA-gx5p-jg67-6x7h
reference_id GHSA-gx5p-jg67-6x7h
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gx5p-jg67-6x7h
6
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h
reference_id GHSA-gx5p-jg67-6x7h
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T18:28:00Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h
fixed_packages
0
url pkg:npm/next@15.5.16
purl pkg:npm/next@15.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.16
1
url pkg:npm/next@16.2.5
purl pkg:npm/next@16.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.2.5
aliases CVE-2026-44580, GHSA-gx5p-jg67-6x7h
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4kgz-73xy-xyb2
4
url VCID-51mc-n64v-nugj
vulnerability_id VCID-51mc-n64v-nugj
summary Next Server Actions Source Code Exposure
references
0
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
1
reference_url https://nextjs.org/blog/security-update-2025-12-11
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nextjs.org/blog/security-update-2025-12-11
2
reference_url https://www.cve.org/CVERecord?id=CVE-2025-55183
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.cve.org/CVERecord?id=CVE-2025-55183
3
reference_url https://github.com/advisories/GHSA-w37m-7fhw-fmv9
reference_id GHSA-w37m-7fhw-fmv9
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w37m-7fhw-fmv9
4
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-w37m-7fhw-fmv9
reference_id GHSA-w37m-7fhw-fmv9
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/security/advisories/GHSA-w37m-7fhw-fmv9
fixed_packages
0
url pkg:npm/next@15.2.7
purl pkg:npm/next@15.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-5ehn-67ys-73h1
4
vulnerability VCID-6r5c-d48p-9qa4
5
vulnerability VCID-93c9-up9w-5fdv
6
vulnerability VCID-9r3b-phvp-xfck
7
vulnerability VCID-b2hu-vcgt-7ydr
8
vulnerability VCID-bjvd-79eg-17f3
9
vulnerability VCID-c9sc-ajq2-pyda
10
vulnerability VCID-gh18-cr6c-47hm
11
vulnerability VCID-haxf-nay6-v3hg
12
vulnerability VCID-uqrk-gg9y-5bfz
13
vulnerability VCID-wgv6-ermy-yycy
14
vulnerability VCID-xzrf-tsxp-hqeg
15
vulnerability VCID-yddv-cunp-yyd7
16
vulnerability VCID-zrny-u44x-3fh1
17
vulnerability VCID-zuh1-7568-nbg3
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.2.7
1
url pkg:npm/next@15.3.7
purl pkg:npm/next@15.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-5ehn-67ys-73h1
4
vulnerability VCID-6r5c-d48p-9qa4
5
vulnerability VCID-93c9-up9w-5fdv
6
vulnerability VCID-9r3b-phvp-xfck
7
vulnerability VCID-b2hu-vcgt-7ydr
8
vulnerability VCID-bjvd-79eg-17f3
9
vulnerability VCID-c9sc-ajq2-pyda
10
vulnerability VCID-gh18-cr6c-47hm
11
vulnerability VCID-haxf-nay6-v3hg
12
vulnerability VCID-uqrk-gg9y-5bfz
13
vulnerability VCID-wgv6-ermy-yycy
14
vulnerability VCID-xzrf-tsxp-hqeg
15
vulnerability VCID-yddv-cunp-yyd7
16
vulnerability VCID-zrny-u44x-3fh1
17
vulnerability VCID-zuh1-7568-nbg3
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.3.7
2
url pkg:npm/next@15.4.9
purl pkg:npm/next@15.4.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-5ehn-67ys-73h1
4
vulnerability VCID-6r5c-d48p-9qa4
5
vulnerability VCID-93c9-up9w-5fdv
6
vulnerability VCID-9r3b-phvp-xfck
7
vulnerability VCID-b2hu-vcgt-7ydr
8
vulnerability VCID-bjvd-79eg-17f3
9
vulnerability VCID-c9sc-ajq2-pyda
10
vulnerability VCID-gh18-cr6c-47hm
11
vulnerability VCID-haxf-nay6-v3hg
12
vulnerability VCID-uqrk-gg9y-5bfz
13
vulnerability VCID-w4pk-pmxb-c7fr
14
vulnerability VCID-wgv6-ermy-yycy
15
vulnerability VCID-xzrf-tsxp-hqeg
16
vulnerability VCID-yddv-cunp-yyd7
17
vulnerability VCID-zrny-u44x-3fh1
18
vulnerability VCID-zuh1-7568-nbg3
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.4.9
3
url pkg:npm/next@15.5.0
purl pkg:npm/next@15.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2rsy-25vf-cufu
2
vulnerability VCID-2wxy-d9mx-u7du
3
vulnerability VCID-4kgz-73xy-xyb2
4
vulnerability VCID-5ehn-67ys-73h1
5
vulnerability VCID-6r5c-d48p-9qa4
6
vulnerability VCID-93c9-up9w-5fdv
7
vulnerability VCID-9r3b-phvp-xfck
8
vulnerability VCID-b2hu-vcgt-7ydr
9
vulnerability VCID-bjvd-79eg-17f3
10
vulnerability VCID-gh18-cr6c-47hm
11
vulnerability VCID-haxf-nay6-v3hg
12
vulnerability VCID-uqrk-gg9y-5bfz
13
vulnerability VCID-w4pk-pmxb-c7fr
14
vulnerability VCID-wgv6-ermy-yycy
15
vulnerability VCID-xzrf-tsxp-hqeg
16
vulnerability VCID-yddv-cunp-yyd7
17
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.0
4
url pkg:npm/next@15.5.8
purl pkg:npm/next@15.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-5ehn-67ys-73h1
4
vulnerability VCID-6r5c-d48p-9qa4
5
vulnerability VCID-93c9-up9w-5fdv
6
vulnerability VCID-9r3b-phvp-xfck
7
vulnerability VCID-b2hu-vcgt-7ydr
8
vulnerability VCID-bjvd-79eg-17f3
9
vulnerability VCID-c9sc-ajq2-pyda
10
vulnerability VCID-gh18-cr6c-47hm
11
vulnerability VCID-haxf-nay6-v3hg
12
vulnerability VCID-uqrk-gg9y-5bfz
13
vulnerability VCID-w4pk-pmxb-c7fr
14
vulnerability VCID-wgv6-ermy-yycy
15
vulnerability VCID-xzrf-tsxp-hqeg
16
vulnerability VCID-yddv-cunp-yyd7
17
vulnerability VCID-zrny-u44x-3fh1
18
vulnerability VCID-zuh1-7568-nbg3
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.8
5
url pkg:npm/next@15.6.0-canary.59
purl pkg:npm/next@15.6.0-canary.59
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-c9sc-ajq2-pyda
2
vulnerability VCID-v7dq-7t8n-j7b5
3
vulnerability VCID-zuh1-7568-nbg3
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.6.0-canary.59
6
url pkg:npm/next@16.0.9
purl pkg:npm/next@16.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-51r9-nmc2-tyc7
4
vulnerability VCID-5ehn-67ys-73h1
5
vulnerability VCID-6r5c-d48p-9qa4
6
vulnerability VCID-93c9-up9w-5fdv
7
vulnerability VCID-9r3b-phvp-xfck
8
vulnerability VCID-b2hu-vcgt-7ydr
9
vulnerability VCID-bjvd-79eg-17f3
10
vulnerability VCID-c9sc-ajq2-pyda
11
vulnerability VCID-chsk-ka34-yqaf
12
vulnerability VCID-gh18-cr6c-47hm
13
vulnerability VCID-haxf-nay6-v3hg
14
vulnerability VCID-qptg-e7c6-puhs
15
vulnerability VCID-uqrk-gg9y-5bfz
16
vulnerability VCID-v7dq-7t8n-j7b5
17
vulnerability VCID-w4pk-pmxb-c7fr
18
vulnerability VCID-wgv6-ermy-yycy
19
vulnerability VCID-xzrf-tsxp-hqeg
20
vulnerability VCID-yddv-cunp-yyd7
21
vulnerability VCID-zrny-u44x-3fh1
22
vulnerability VCID-zuh1-7568-nbg3
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.0.9
7
url pkg:npm/next@16.1.0-canary.17
purl pkg:npm/next@16.1.0-canary.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-51r9-nmc2-tyc7
4
vulnerability VCID-5ehn-67ys-73h1
5
vulnerability VCID-6r5c-d48p-9qa4
6
vulnerability VCID-93c9-up9w-5fdv
7
vulnerability VCID-9r3b-phvp-xfck
8
vulnerability VCID-b2hu-vcgt-7ydr
9
vulnerability VCID-bjvd-79eg-17f3
10
vulnerability VCID-c9sc-ajq2-pyda
11
vulnerability VCID-chsk-ka34-yqaf
12
vulnerability VCID-gh18-cr6c-47hm
13
vulnerability VCID-haxf-nay6-v3hg
14
vulnerability VCID-qptg-e7c6-puhs
15
vulnerability VCID-uqrk-gg9y-5bfz
16
vulnerability VCID-v7dq-7t8n-j7b5
17
vulnerability VCID-w4pk-pmxb-c7fr
18
vulnerability VCID-wgv6-ermy-yycy
19
vulnerability VCID-xzrf-tsxp-hqeg
20
vulnerability VCID-yddv-cunp-yyd7
21
vulnerability VCID-zrny-u44x-3fh1
22
vulnerability VCID-zuh1-7568-nbg3
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.1.0-canary.17
aliases GHSA-w37m-7fhw-fmv9
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-51mc-n64v-nugj
5
url VCID-5ehn-67ys-73h1
vulnerability_id VCID-5ehn-67ys-73h1
summary Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering through the Cache Components feature can be vulnerable to connection exhaustion through crafted POST requests to a server action. In affected configurations, a malicious request can trigger a request-body handling deadlock that leaves connections open for an extended period, consuming file descriptors and server capacity until legitimate users are denied service. This vulnerability is fixed in 15.5.16 and 16.2.5.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44579.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44579.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-44579
reference_id
reference_type
scores
0
value 0.00019
scoring_system epss
scoring_elements 0.05415
published_at 2026-06-12T12:55:00Z
1
value 0.00019
scoring_system epss
scoring_elements 0.05393
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-44579
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://github.com/vercel/next.js/releases/tag/v15.5.16
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v15.5.16
4
reference_url https://github.com/vercel/next.js/releases/tag/v16.2.5
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v16.2.5
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-44579
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-44579
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2477193
reference_id 2477193
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2477193
7
reference_url https://github.com/advisories/GHSA-mg66-mrh9-m8jx
reference_id GHSA-mg66-mrh9-m8jx
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mg66-mrh9-m8jx
8
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx
reference_id GHSA-mg66-mrh9-m8jx
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-14T15:33:46Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx
fixed_packages
0
url pkg:npm/next@15.5.16
purl pkg:npm/next@15.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.16
1
url pkg:npm/next@16.2.5
purl pkg:npm/next@16.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.2.5
aliases CVE-2026-44579, GHSA-mg66-mrh9-m8jx
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5ehn-67ys-73h1
6
url VCID-6r5c-d48p-9qa4
vulnerability_id VCID-6r5c-d48p-9qa4
summary Next.js is a React framework for building full-stack web applications. From 14.2.0 to before 15.5.16 and 16.2.5, applications using React Server Components can be vulnerable to cache poisoning when shared caches do not correctly partition response variants. Under affected conditions, an attacker can cause an RSC response to be served from the original URL and poison shared cache entries so later visitors receive component payloads instead of the expected HTML. This vulnerability is fixed in 15.5.16 and 16.2.5.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44576.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44576.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-44576
reference_id
reference_type
scores
0
value 0.00016
scoring_system epss
scoring_elements 0.03954
published_at 2026-06-12T12:55:00Z
1
value 0.00016
scoring_system epss
scoring_elements 0.03936
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-44576
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://github.com/vercel/next.js/releases/tag/v15.5.16
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v15.5.16
4
reference_url https://github.com/vercel/next.js/releases/tag/v16.2.5
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v16.2.5
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-44576
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-44576
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2477209
reference_id 2477209
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2477209
7
reference_url https://github.com/advisories/GHSA-wfc6-r584-vfw7
reference_id GHSA-wfc6-r584-vfw7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wfc6-r584-vfw7
8
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7
reference_id GHSA-wfc6-r584-vfw7
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-18T13:45:23Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7
fixed_packages
0
url pkg:npm/next@15.5.16
purl pkg:npm/next@15.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.16
1
url pkg:npm/next@16.2.5
purl pkg:npm/next@16.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.2.5
aliases CVE-2026-44576, GHSA-wfc6-r584-vfw7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6r5c-d48p-9qa4
7
url VCID-93c9-up9w-5fdv
vulnerability_id VCID-93c9-up9w-5fdv
summary Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. An attacker could cause out-of-memory conditions by requesting large local assets from the /_next/image endpoint that match the images.localPatterns configuration (by default, all patterns are allowed). This vulnerability is fixed in 15.5.16 and 16.2.5.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44577.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44577.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-44577
reference_id
reference_type
scores
0
value 0.00018
scoring_system epss
scoring_elements 0.05061
published_at 2026-06-12T12:55:00Z
1
value 0.00018
scoring_system epss
scoring_elements 0.05058
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-44577
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://github.com/vercel/next.js/releases/tag/v15.5.16
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v15.5.16
4
reference_url https://github.com/vercel/next.js/releases/tag/v16.2.5
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v16.2.5
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-44577
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-44577
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2477194
reference_id 2477194
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2477194
7
reference_url https://github.com/advisories/GHSA-h64f-5h5j-jqjh
reference_id GHSA-h64f-5h5j-jqjh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-h64f-5h5j-jqjh
8
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh
reference_id GHSA-h64f-5h5j-jqjh
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-14T18:33:40Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh
fixed_packages
0
url pkg:npm/next@15.5.16
purl pkg:npm/next@15.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.16
1
url pkg:npm/next@16.2.5
purl pkg:npm/next@16.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.2.5
aliases CVE-2026-44577, GHSA-h64f-5h5j-jqjh
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-93c9-up9w-5fdv
8
url VCID-b2hu-vcgt-7ydr
vulnerability_id VCID-b2hu-vcgt-7ydr
summary Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 and 16.2.5, React Server Component responses can be vulnerable to cache poisoning in deployments that rely on shared caches with insufficient response partitioning. In affected conditions, collisions in the _rsc cache-busting value can allow an attacker to poison cache entries so users receive the wrong response variant for a given URL. This vulnerability is fixed in 15.5.16 and 16.2.5.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44582.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44582.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-44582
reference_id
reference_type
scores
0
value 9e-05
scoring_system epss
scoring_elements 0.01075
published_at 2026-06-12T12:55:00Z
1
value 9e-05
scoring_system epss
scoring_elements 0.01077
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-44582
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://github.com/vercel/next.js/releases/tag/v15.5.16
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v15.5.16
4
reference_url https://github.com/vercel/next.js/releases/tag/v16.2.5
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v16.2.5
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-44582
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-44582
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2477211
reference_id 2477211
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2477211
7
reference_url https://github.com/advisories/GHSA-vfv6-92ff-j949
reference_id GHSA-vfv6-92ff-j949
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vfv6-92ff-j949
8
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949
reference_id GHSA-vfv6-92ff-j949
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-14T18:23:45Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949
fixed_packages
0
url pkg:npm/next@15.5.16
purl pkg:npm/next@15.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.16
1
url pkg:npm/next@16.2.5
purl pkg:npm/next@16.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.2.5
aliases CVE-2026-44582, GHSA-vfv6-92ff-j949
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b2hu-vcgt-7ydr
9
url VCID-bjvd-79eg-17f3
vulnerability_id VCID-bjvd-79eg-17f3
summary Next.js is a React framework for building full-stack web applications. Starting in version 9.5.0 and prior to versions 15.5.13 and 16.1.7, when Next.js rewrites proxy traffic to an external backend, a crafted `DELETE`/`OPTIONS` request using `Transfer-Encoding: chunked` could trigger request boundary disagreement between the proxy and backend. This could allow request smuggling through rewritten routes. An attacker could smuggle a second request to unintended backend routes (for example, internal/admin endpoints), bypassing assumptions that only the configured rewrite destination/path is reachable. This does not impact applications hosted on providers that handle rewrites at the CDN level, such as Vercel. The vulnerability originated in an upstream library vendored by Next.js. It is fixed in Next.js 15.5.13 and 16.1.7 by updating that dependency’s behavior so `content-length: 0` is added only when both `content-length` and `transfer-encoding` are absent, and `transfer-encoding` is no longer removed in that code path. If upgrading is not immediately possible, block chunked `DELETE`/`OPTIONS` requests on rewritten routes at the edge/proxy, and/or enforce authentication/authorization on backend routes.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-29057.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-29057.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-29057
reference_id
reference_type
scores
0
value 0.00031
scoring_system epss
scoring_elements 0.0944
published_at 2026-06-11T12:55:00Z
1
value 0.00031
scoring_system epss
scoring_elements 0.09495
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-29057
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-29057
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-29057
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2448515
reference_id 2448515
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2448515
5
reference_url https://github.com/vercel/next.js/commit/dc98c04f376c6a1df76ec3e0a2d07edf4abdabd6
reference_id dc98c04f376c6a1df76ec3e0a2d07edf4abdabd6
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-18T14:47:14Z/
url https://github.com/vercel/next.js/commit/dc98c04f376c6a1df76ec3e0a2d07edf4abdabd6
6
reference_url https://github.com/advisories/GHSA-ggv3-7p47-pfv8
reference_id GHSA-ggv3-7p47-pfv8
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-ggv3-7p47-pfv8
7
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-ggv3-7p47-pfv8
reference_id GHSA-ggv3-7p47-pfv8
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-18T14:47:14Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-ggv3-7p47-pfv8
8
reference_url https://github.com/vercel/next.js/releases/tag/v15.5.13
reference_id v15.5.13
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-18T14:47:14Z/
url https://github.com/vercel/next.js/releases/tag/v15.5.13
9
reference_url https://github.com/vercel/next.js/releases/tag/v16.1.7
reference_id v16.1.7
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-18T14:47:14Z/
url https://github.com/vercel/next.js/releases/tag/v16.1.7
fixed_packages
0
url pkg:npm/next@15.5.13
purl pkg:npm/next@15.5.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wxy-d9mx-u7du
1
vulnerability VCID-4kgz-73xy-xyb2
2
vulnerability VCID-5ehn-67ys-73h1
3
vulnerability VCID-6r5c-d48p-9qa4
4
vulnerability VCID-93c9-up9w-5fdv
5
vulnerability VCID-9r3b-phvp-xfck
6
vulnerability VCID-b2hu-vcgt-7ydr
7
vulnerability VCID-gh18-cr6c-47hm
8
vulnerability VCID-haxf-nay6-v3hg
9
vulnerability VCID-uqrk-gg9y-5bfz
10
vulnerability VCID-w4pk-pmxb-c7fr
11
vulnerability VCID-wgv6-ermy-yycy
12
vulnerability VCID-xzrf-tsxp-hqeg
13
vulnerability VCID-yddv-cunp-yyd7
14
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.13
1
url pkg:npm/next@16.1.7
purl pkg:npm/next@16.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wxy-d9mx-u7du
1
vulnerability VCID-4kgz-73xy-xyb2
2
vulnerability VCID-5ehn-67ys-73h1
3
vulnerability VCID-6r5c-d48p-9qa4
4
vulnerability VCID-93c9-up9w-5fdv
5
vulnerability VCID-9r3b-phvp-xfck
6
vulnerability VCID-b2hu-vcgt-7ydr
7
vulnerability VCID-gh18-cr6c-47hm
8
vulnerability VCID-haxf-nay6-v3hg
9
vulnerability VCID-w4pk-pmxb-c7fr
10
vulnerability VCID-wgv6-ermy-yycy
11
vulnerability VCID-xzrf-tsxp-hqeg
12
vulnerability VCID-yddv-cunp-yyd7
13
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.1.7
aliases CVE-2026-29057, GHSA-ggv3-7p47-pfv8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bjvd-79eg-17f3
10
url VCID-c9sc-ajq2-pyda
vulnerability_id VCID-c9sc-ajq2-pyda
summary Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components
references
0
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
1
reference_url https://vercel.com/changelog/summary-of-cve-2026-23864
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://vercel.com/changelog/summary-of-cve-2026-23864
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-23864
reference_id CVE-2026-23864
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-23864
3
reference_url https://github.com/facebook/react/security/advisories/GHSA-83fc-fqcc-2hmg
reference_id GHSA-83fc-fqcc-2hmg
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/facebook/react/security/advisories/GHSA-83fc-fqcc-2hmg
4
reference_url https://github.com/advisories/GHSA-h25m-26qc-wcjf
reference_id GHSA-h25m-26qc-wcjf
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-h25m-26qc-wcjf
5
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-h25m-26qc-wcjf
reference_id GHSA-h25m-26qc-wcjf
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/security/advisories/GHSA-h25m-26qc-wcjf
fixed_packages
0
url pkg:npm/next@15.2.9
purl pkg:npm/next@15.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-5ehn-67ys-73h1
4
vulnerability VCID-6r5c-d48p-9qa4
5
vulnerability VCID-93c9-up9w-5fdv
6
vulnerability VCID-9r3b-phvp-xfck
7
vulnerability VCID-b2hu-vcgt-7ydr
8
vulnerability VCID-bjvd-79eg-17f3
9
vulnerability VCID-gh18-cr6c-47hm
10
vulnerability VCID-haxf-nay6-v3hg
11
vulnerability VCID-uqrk-gg9y-5bfz
12
vulnerability VCID-wgv6-ermy-yycy
13
vulnerability VCID-xzrf-tsxp-hqeg
14
vulnerability VCID-yddv-cunp-yyd7
15
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.2.9
1
url pkg:npm/next@15.3.9
purl pkg:npm/next@15.3.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-5ehn-67ys-73h1
4
vulnerability VCID-6r5c-d48p-9qa4
5
vulnerability VCID-93c9-up9w-5fdv
6
vulnerability VCID-9r3b-phvp-xfck
7
vulnerability VCID-b2hu-vcgt-7ydr
8
vulnerability VCID-bjvd-79eg-17f3
9
vulnerability VCID-gh18-cr6c-47hm
10
vulnerability VCID-haxf-nay6-v3hg
11
vulnerability VCID-uqrk-gg9y-5bfz
12
vulnerability VCID-wgv6-ermy-yycy
13
vulnerability VCID-xzrf-tsxp-hqeg
14
vulnerability VCID-yddv-cunp-yyd7
15
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.3.9
2
url pkg:npm/next@15.4.11
purl pkg:npm/next@15.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-5ehn-67ys-73h1
4
vulnerability VCID-6r5c-d48p-9qa4
5
vulnerability VCID-93c9-up9w-5fdv
6
vulnerability VCID-9r3b-phvp-xfck
7
vulnerability VCID-b2hu-vcgt-7ydr
8
vulnerability VCID-bjvd-79eg-17f3
9
vulnerability VCID-gh18-cr6c-47hm
10
vulnerability VCID-haxf-nay6-v3hg
11
vulnerability VCID-uqrk-gg9y-5bfz
12
vulnerability VCID-w4pk-pmxb-c7fr
13
vulnerability VCID-wgv6-ermy-yycy
14
vulnerability VCID-xzrf-tsxp-hqeg
15
vulnerability VCID-yddv-cunp-yyd7
16
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.4.11
3
url pkg:npm/next@15.5.10
purl pkg:npm/next@15.5.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wxy-d9mx-u7du
1
vulnerability VCID-4kgz-73xy-xyb2
2
vulnerability VCID-5ehn-67ys-73h1
3
vulnerability VCID-6r5c-d48p-9qa4
4
vulnerability VCID-93c9-up9w-5fdv
5
vulnerability VCID-9r3b-phvp-xfck
6
vulnerability VCID-b2hu-vcgt-7ydr
7
vulnerability VCID-bjvd-79eg-17f3
8
vulnerability VCID-gh18-cr6c-47hm
9
vulnerability VCID-haxf-nay6-v3hg
10
vulnerability VCID-uqrk-gg9y-5bfz
11
vulnerability VCID-w4pk-pmxb-c7fr
12
vulnerability VCID-wgv6-ermy-yycy
13
vulnerability VCID-xzrf-tsxp-hqeg
14
vulnerability VCID-yddv-cunp-yyd7
15
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.10
4
url pkg:npm/next@15.6.0-canary.61
purl pkg:npm/next@15.6.0-canary.61
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.6.0-canary.61
5
url pkg:npm/next@16.0.11
purl pkg:npm/next@16.0.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-51r9-nmc2-tyc7
4
vulnerability VCID-5ehn-67ys-73h1
5
vulnerability VCID-6r5c-d48p-9qa4
6
vulnerability VCID-93c9-up9w-5fdv
7
vulnerability VCID-9r3b-phvp-xfck
8
vulnerability VCID-b2hu-vcgt-7ydr
9
vulnerability VCID-bjvd-79eg-17f3
10
vulnerability VCID-chsk-ka34-yqaf
11
vulnerability VCID-gh18-cr6c-47hm
12
vulnerability VCID-haxf-nay6-v3hg
13
vulnerability VCID-qptg-e7c6-puhs
14
vulnerability VCID-uqrk-gg9y-5bfz
15
vulnerability VCID-v7dq-7t8n-j7b5
16
vulnerability VCID-w4pk-pmxb-c7fr
17
vulnerability VCID-wgv6-ermy-yycy
18
vulnerability VCID-xzrf-tsxp-hqeg
19
vulnerability VCID-yddv-cunp-yyd7
20
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.0.11
6
url pkg:npm/next@16.1.5
purl pkg:npm/next@16.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wxy-d9mx-u7du
1
vulnerability VCID-4kgz-73xy-xyb2
2
vulnerability VCID-51r9-nmc2-tyc7
3
vulnerability VCID-5ehn-67ys-73h1
4
vulnerability VCID-6r5c-d48p-9qa4
5
vulnerability VCID-93c9-up9w-5fdv
6
vulnerability VCID-9r3b-phvp-xfck
7
vulnerability VCID-b2hu-vcgt-7ydr
8
vulnerability VCID-bjvd-79eg-17f3
9
vulnerability VCID-chsk-ka34-yqaf
10
vulnerability VCID-gh18-cr6c-47hm
11
vulnerability VCID-haxf-nay6-v3hg
12
vulnerability VCID-qptg-e7c6-puhs
13
vulnerability VCID-uqrk-gg9y-5bfz
14
vulnerability VCID-w4pk-pmxb-c7fr
15
vulnerability VCID-wgv6-ermy-yycy
16
vulnerability VCID-xzrf-tsxp-hqeg
17
vulnerability VCID-yddv-cunp-yyd7
18
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.1.5
aliases GHSA-h25m-26qc-wcjf
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c9sc-ajq2-pyda
11
url VCID-gm62-hv3y-v7b8
vulnerability_id VCID-gm62-hv3y-v7b8
summary Next Vulnerable to Denial of Service with Server Components
references
0
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
1
reference_url https://nextjs.org/blog/security-update-2025-12-11
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nextjs.org/blog/security-update-2025-12-11
2
reference_url https://www.cve.org/CVERecord?id=CVE-2025-55184
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.cve.org/CVERecord?id=CVE-2025-55184
3
reference_url https://github.com/advisories/GHSA-mwv6-3258-q52c
reference_id GHSA-mwv6-3258-q52c
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mwv6-3258-q52c
4
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-mwv6-3258-q52c
reference_id GHSA-mwv6-3258-q52c
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/security/advisories/GHSA-mwv6-3258-q52c
fixed_packages
0
url pkg:npm/next@15.2.7
purl pkg:npm/next@15.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-5ehn-67ys-73h1
4
vulnerability VCID-6r5c-d48p-9qa4
5
vulnerability VCID-93c9-up9w-5fdv
6
vulnerability VCID-9r3b-phvp-xfck
7
vulnerability VCID-b2hu-vcgt-7ydr
8
vulnerability VCID-bjvd-79eg-17f3
9
vulnerability VCID-c9sc-ajq2-pyda
10
vulnerability VCID-gh18-cr6c-47hm
11
vulnerability VCID-haxf-nay6-v3hg
12
vulnerability VCID-uqrk-gg9y-5bfz
13
vulnerability VCID-wgv6-ermy-yycy
14
vulnerability VCID-xzrf-tsxp-hqeg
15
vulnerability VCID-yddv-cunp-yyd7
16
vulnerability VCID-zrny-u44x-3fh1
17
vulnerability VCID-zuh1-7568-nbg3
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.2.7
1
url pkg:npm/next@15.3.7
purl pkg:npm/next@15.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-5ehn-67ys-73h1
4
vulnerability VCID-6r5c-d48p-9qa4
5
vulnerability VCID-93c9-up9w-5fdv
6
vulnerability VCID-9r3b-phvp-xfck
7
vulnerability VCID-b2hu-vcgt-7ydr
8
vulnerability VCID-bjvd-79eg-17f3
9
vulnerability VCID-c9sc-ajq2-pyda
10
vulnerability VCID-gh18-cr6c-47hm
11
vulnerability VCID-haxf-nay6-v3hg
12
vulnerability VCID-uqrk-gg9y-5bfz
13
vulnerability VCID-wgv6-ermy-yycy
14
vulnerability VCID-xzrf-tsxp-hqeg
15
vulnerability VCID-yddv-cunp-yyd7
16
vulnerability VCID-zrny-u44x-3fh1
17
vulnerability VCID-zuh1-7568-nbg3
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.3.7
2
url pkg:npm/next@15.4.9
purl pkg:npm/next@15.4.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-5ehn-67ys-73h1
4
vulnerability VCID-6r5c-d48p-9qa4
5
vulnerability VCID-93c9-up9w-5fdv
6
vulnerability VCID-9r3b-phvp-xfck
7
vulnerability VCID-b2hu-vcgt-7ydr
8
vulnerability VCID-bjvd-79eg-17f3
9
vulnerability VCID-c9sc-ajq2-pyda
10
vulnerability VCID-gh18-cr6c-47hm
11
vulnerability VCID-haxf-nay6-v3hg
12
vulnerability VCID-uqrk-gg9y-5bfz
13
vulnerability VCID-w4pk-pmxb-c7fr
14
vulnerability VCID-wgv6-ermy-yycy
15
vulnerability VCID-xzrf-tsxp-hqeg
16
vulnerability VCID-yddv-cunp-yyd7
17
vulnerability VCID-zrny-u44x-3fh1
18
vulnerability VCID-zuh1-7568-nbg3
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.4.9
3
url pkg:npm/next@15.5.0
purl pkg:npm/next@15.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2rsy-25vf-cufu
2
vulnerability VCID-2wxy-d9mx-u7du
3
vulnerability VCID-4kgz-73xy-xyb2
4
vulnerability VCID-5ehn-67ys-73h1
5
vulnerability VCID-6r5c-d48p-9qa4
6
vulnerability VCID-93c9-up9w-5fdv
7
vulnerability VCID-9r3b-phvp-xfck
8
vulnerability VCID-b2hu-vcgt-7ydr
9
vulnerability VCID-bjvd-79eg-17f3
10
vulnerability VCID-gh18-cr6c-47hm
11
vulnerability VCID-haxf-nay6-v3hg
12
vulnerability VCID-uqrk-gg9y-5bfz
13
vulnerability VCID-w4pk-pmxb-c7fr
14
vulnerability VCID-wgv6-ermy-yycy
15
vulnerability VCID-xzrf-tsxp-hqeg
16
vulnerability VCID-yddv-cunp-yyd7
17
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.0
4
url pkg:npm/next@15.5.8
purl pkg:npm/next@15.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-5ehn-67ys-73h1
4
vulnerability VCID-6r5c-d48p-9qa4
5
vulnerability VCID-93c9-up9w-5fdv
6
vulnerability VCID-9r3b-phvp-xfck
7
vulnerability VCID-b2hu-vcgt-7ydr
8
vulnerability VCID-bjvd-79eg-17f3
9
vulnerability VCID-c9sc-ajq2-pyda
10
vulnerability VCID-gh18-cr6c-47hm
11
vulnerability VCID-haxf-nay6-v3hg
12
vulnerability VCID-uqrk-gg9y-5bfz
13
vulnerability VCID-w4pk-pmxb-c7fr
14
vulnerability VCID-wgv6-ermy-yycy
15
vulnerability VCID-xzrf-tsxp-hqeg
16
vulnerability VCID-yddv-cunp-yyd7
17
vulnerability VCID-zrny-u44x-3fh1
18
vulnerability VCID-zuh1-7568-nbg3
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.8
5
url pkg:npm/next@15.6.0-canary.59
purl pkg:npm/next@15.6.0-canary.59
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-c9sc-ajq2-pyda
2
vulnerability VCID-v7dq-7t8n-j7b5
3
vulnerability VCID-zuh1-7568-nbg3
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.6.0-canary.59
6
url pkg:npm/next@16.0.9
purl pkg:npm/next@16.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-51r9-nmc2-tyc7
4
vulnerability VCID-5ehn-67ys-73h1
5
vulnerability VCID-6r5c-d48p-9qa4
6
vulnerability VCID-93c9-up9w-5fdv
7
vulnerability VCID-9r3b-phvp-xfck
8
vulnerability VCID-b2hu-vcgt-7ydr
9
vulnerability VCID-bjvd-79eg-17f3
10
vulnerability VCID-c9sc-ajq2-pyda
11
vulnerability VCID-chsk-ka34-yqaf
12
vulnerability VCID-gh18-cr6c-47hm
13
vulnerability VCID-haxf-nay6-v3hg
14
vulnerability VCID-qptg-e7c6-puhs
15
vulnerability VCID-uqrk-gg9y-5bfz
16
vulnerability VCID-v7dq-7t8n-j7b5
17
vulnerability VCID-w4pk-pmxb-c7fr
18
vulnerability VCID-wgv6-ermy-yycy
19
vulnerability VCID-xzrf-tsxp-hqeg
20
vulnerability VCID-yddv-cunp-yyd7
21
vulnerability VCID-zrny-u44x-3fh1
22
vulnerability VCID-zuh1-7568-nbg3
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.0.9
7
url pkg:npm/next@16.1.0-canary.17
purl pkg:npm/next@16.1.0-canary.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2wxy-d9mx-u7du
2
vulnerability VCID-4kgz-73xy-xyb2
3
vulnerability VCID-51r9-nmc2-tyc7
4
vulnerability VCID-5ehn-67ys-73h1
5
vulnerability VCID-6r5c-d48p-9qa4
6
vulnerability VCID-93c9-up9w-5fdv
7
vulnerability VCID-9r3b-phvp-xfck
8
vulnerability VCID-b2hu-vcgt-7ydr
9
vulnerability VCID-bjvd-79eg-17f3
10
vulnerability VCID-c9sc-ajq2-pyda
11
vulnerability VCID-chsk-ka34-yqaf
12
vulnerability VCID-gh18-cr6c-47hm
13
vulnerability VCID-haxf-nay6-v3hg
14
vulnerability VCID-qptg-e7c6-puhs
15
vulnerability VCID-uqrk-gg9y-5bfz
16
vulnerability VCID-v7dq-7t8n-j7b5
17
vulnerability VCID-w4pk-pmxb-c7fr
18
vulnerability VCID-wgv6-ermy-yycy
19
vulnerability VCID-xzrf-tsxp-hqeg
20
vulnerability VCID-yddv-cunp-yyd7
21
vulnerability VCID-zrny-u44x-3fh1
22
vulnerability VCID-zuh1-7568-nbg3
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.1.0-canary.17
aliases GHSA-mwv6-3258-q52c
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gm62-hv3y-v7b8
12
url VCID-haxf-nay6-v3hg
vulnerability_id VCID-haxf-nay6-v3hg
summary 
Next.js has a Denial of Service with Server Components
A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23869](https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg). You can read more about this advisory our [this changelog](https://vercel.com/changelog/summary-of-cve-2026-23869).

A specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.
references
0
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
1
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-q4gf-8mx6-v5v3
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/security/advisories/GHSA-q4gf-8mx6-v5v3
2
reference_url https://vercel.com/changelog/summary-of-cve-2026-23869
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://vercel.com/changelog/summary-of-cve-2026-23869
3
reference_url https://github.com/advisories/GHSA-q4gf-8mx6-v5v3
reference_id GHSA-q4gf-8mx6-v5v3
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q4gf-8mx6-v5v3
fixed_packages
0
url pkg:npm/next@15.5.15
purl pkg:npm/next@15.5.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wxy-d9mx-u7du
1
vulnerability VCID-4kgz-73xy-xyb2
2
vulnerability VCID-5ehn-67ys-73h1
3
vulnerability VCID-6r5c-d48p-9qa4
4
vulnerability VCID-93c9-up9w-5fdv
5
vulnerability VCID-9r3b-phvp-xfck
6
vulnerability VCID-b2hu-vcgt-7ydr
7
vulnerability VCID-gh18-cr6c-47hm
8
vulnerability VCID-w4pk-pmxb-c7fr
9
vulnerability VCID-wgv6-ermy-yycy
10
vulnerability VCID-xzrf-tsxp-hqeg
11
vulnerability VCID-yddv-cunp-yyd7
12
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.15
1
url pkg:npm/next@16.2.3
purl pkg:npm/next@16.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wxy-d9mx-u7du
1
vulnerability VCID-4kgz-73xy-xyb2
2
vulnerability VCID-5ehn-67ys-73h1
3
vulnerability VCID-6r5c-d48p-9qa4
4
vulnerability VCID-93c9-up9w-5fdv
5
vulnerability VCID-9r3b-phvp-xfck
6
vulnerability VCID-b2hu-vcgt-7ydr
7
vulnerability VCID-gh18-cr6c-47hm
8
vulnerability VCID-w4pk-pmxb-c7fr
9
vulnerability VCID-wgv6-ermy-yycy
10
vulnerability VCID-xzrf-tsxp-hqeg
11
vulnerability VCID-yddv-cunp-yyd7
12
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.2.3
aliases GHSA-q4gf-8mx6-v5v3
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-haxf-nay6-v3hg
13
url VCID-mv21-m5nh-vygs
vulnerability_id VCID-mv21-m5nh-vygs
summary Next.js is a React framework for building full-stack web applications. In versions starting from 13.0 to before 14.2.30 and 15.0.0 to before 15.2.2, Next.js may have allowed limited source code exposure when the dev server was running with the App Router enabled. The vulnerability only affects local development environments and requires the user to visit a malicious webpage while npm run dev is active. This issue has been patched in versions 14.2.30 and 15.2.2.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-48068.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-48068.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-48068
reference_id
reference_type
scores
0
value 0.00101
scoring_system epss
scoring_elements 0.27382
published_at 2026-06-11T12:55:00Z
1
value 0.00101
scoring_system epss
scoring_elements 0.27585
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-48068
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-48068
reference_id
reference_type
scores
0
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-48068
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2369320
reference_id 2369320
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2369320
5
reference_url https://vercel.com/changelog/cve-2025-48068
reference_id cve-2025-48068
reference_type
scores
0
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-30T12:43:40Z/
url https://vercel.com/changelog/cve-2025-48068
6
reference_url https://github.com/advisories/GHSA-3h52-269p-cp9r
reference_id GHSA-3h52-269p-cp9r
reference_type
scores
url https://github.com/advisories/GHSA-3h52-269p-cp9r
7
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-3h52-269p-cp9r
reference_id GHSA-3h52-269p-cp9r
reference_type
scores
0
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-30T12:43:40Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-3h52-269p-cp9r
fixed_packages
0
url pkg:npm/next@15.2.2
purl pkg:npm/next@15.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2rsy-25vf-cufu
2
vulnerability VCID-2wxy-d9mx-u7du
3
vulnerability VCID-4kgz-73xy-xyb2
4
vulnerability VCID-51mc-n64v-nugj
5
vulnerability VCID-5ehn-67ys-73h1
6
vulnerability VCID-6r5c-d48p-9qa4
7
vulnerability VCID-93c9-up9w-5fdv
8
vulnerability VCID-9r3b-phvp-xfck
9
vulnerability VCID-b2hu-vcgt-7ydr
10
vulnerability VCID-bjvd-79eg-17f3
11
vulnerability VCID-c9sc-ajq2-pyda
12
vulnerability VCID-gh18-cr6c-47hm
13
vulnerability VCID-gm62-hv3y-v7b8
14
vulnerability VCID-haxf-nay6-v3hg
15
vulnerability VCID-p7a7-ehjr-xqf3
16
vulnerability VCID-s5uv-nxf7-rkbj
17
vulnerability VCID-t6n1-e9kc-hqgx
18
vulnerability VCID-uqrk-gg9y-5bfz
19
vulnerability VCID-wdsq-y8uf-2feh
20
vulnerability VCID-wgv6-ermy-yycy
21
vulnerability VCID-xzrf-tsxp-hqeg
22
vulnerability VCID-yddv-cunp-yyd7
23
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.2.2
aliases CVE-2025-48068, GHSA-3h52-269p-cp9r
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mv21-m5nh-vygs
14
url VCID-p7a7-ehjr-xqf3
vulnerability_id VCID-p7a7-ehjr-xqf3
summary Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization API routes are affected by cache key confusion. When images returned from API routes vary based on request headers (such as Cookie or Authorization), these responses could be incorrectly cached and served to unauthorized users due to a cache key confusion bug. This vulnerability has been fixed in Next.js versions 14.2.31 and 15.4.5. All users are encouraged to upgrade if they use API routes to serve images that depend on request headers and have image optimization enabled.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-57752.json
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-57752.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-57752
reference_id
reference_type
scores
0
value 0.00144
scoring_system epss
scoring_elements 0.34643
published_at 2026-06-12T12:55:00Z
1
value 0.00144
scoring_system epss
scoring_elements 0.34466
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-57752
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-57752
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-57752
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2392060
reference_id 2392060
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2392060
5
reference_url https://github.com/vercel/next.js/commit/6b12c60c61ee80cb0443ccd20de82ca9b4422ddd
reference_id 6b12c60c61ee80cb0443ccd20de82ca9b4422ddd
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-02T19:23:30Z/
url https://github.com/vercel/next.js/commit/6b12c60c61ee80cb0443ccd20de82ca9b4422ddd
6
reference_url https://github.com/vercel/next.js/pull/82114
reference_id 82114
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-02T19:23:30Z/
url https://github.com/vercel/next.js/pull/82114
7
reference_url https://vercel.com/changelog/cve-2025-57752
reference_id cve-2025-57752
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-02T19:23:30Z/
url https://vercel.com/changelog/cve-2025-57752
8
reference_url https://github.com/advisories/GHSA-g5qg-72qw-gw5v
reference_id GHSA-g5qg-72qw-gw5v
reference_type
scores
url https://github.com/advisories/GHSA-g5qg-72qw-gw5v
9
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-g5qg-72qw-gw5v
reference_id GHSA-g5qg-72qw-gw5v
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-02T19:23:30Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-g5qg-72qw-gw5v
fixed_packages
0
url pkg:npm/next@15.4.5
purl pkg:npm/next@15.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2rsy-25vf-cufu
2
vulnerability VCID-2wxy-d9mx-u7du
3
vulnerability VCID-4kgz-73xy-xyb2
4
vulnerability VCID-51mc-n64v-nugj
5
vulnerability VCID-5ehn-67ys-73h1
6
vulnerability VCID-6r5c-d48p-9qa4
7
vulnerability VCID-93c9-up9w-5fdv
8
vulnerability VCID-9r3b-phvp-xfck
9
vulnerability VCID-b2hu-vcgt-7ydr
10
vulnerability VCID-bjvd-79eg-17f3
11
vulnerability VCID-c9sc-ajq2-pyda
12
vulnerability VCID-gh18-cr6c-47hm
13
vulnerability VCID-gm62-hv3y-v7b8
14
vulnerability VCID-haxf-nay6-v3hg
15
vulnerability VCID-t6n1-e9kc-hqgx
16
vulnerability VCID-uqrk-gg9y-5bfz
17
vulnerability VCID-w4pk-pmxb-c7fr
18
vulnerability VCID-wgv6-ermy-yycy
19
vulnerability VCID-xzrf-tsxp-hqeg
20
vulnerability VCID-yddv-cunp-yyd7
21
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.4.5
aliases CVE-2025-57752, GHSA-g5qg-72qw-gw5v
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p7a7-ehjr-xqf3
15
url VCID-s5uv-nxf7-rkbj
vulnerability_id VCID-s5uv-nxf7-rkbj
summary Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware. If patching to a safe version is infeasible, it is recommend that you prevent external user requests which contain the x-middleware-subrequest header from reaching your Next.js application. This vulnerability is fixed in 12.3.5, 13.5.9, 14.2.25, and 15.2.3.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-29927.json
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-29927.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-29927
reference_id
reference_type
scores
0
value 0.92118
scoring_system epss
scoring_elements 0.99725
published_at 2026-06-12T12:55:00Z
1
value 0.92118
scoring_system epss
scoring_elements 0.99724
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-29927
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-29927
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-29927
4
reference_url https://security.netapp.com/advisory/ntap-20250328-0002
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20250328-0002
5
reference_url https://vercel.com/changelog/vercel-firewall-proactively-protects-against-vulnerability-with-middleware
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://vercel.com/changelog/vercel-firewall-proactively-protects-against-vulnerability-with-middleware
6
reference_url http://www.openwall.com/lists/oss-security/2025/03/23/3
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2025/03/23/3
7
reference_url http://www.openwall.com/lists/oss-security/2025/03/23/4
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2025/03/23/4
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2354069
reference_id 2354069
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2354069
9
reference_url https://github.com/vercel/next.js/commit/52a078da3884efe6501613c7834a3d02a91676d2
reference_id 52a078da3884efe6501613c7834a3d02a91676d2
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-08T15:16:38Z/
url https://github.com/vercel/next.js/commit/52a078da3884efe6501613c7834a3d02a91676d2
10
reference_url https://github.com/vercel/next.js/commit/5fd3ae8f8542677c6294f32d18022731eab6fe48
reference_id 5fd3ae8f8542677c6294f32d18022731eab6fe48
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-08T15:16:38Z/
url https://github.com/vercel/next.js/commit/5fd3ae8f8542677c6294f32d18022731eab6fe48
11
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/52124.txt
reference_id CVE-2025-29927
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/52124.txt
12
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-f82v-jwr5-mffw
reference_id GHSA-f82v-jwr5-mffw
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-08T15:16:38Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-f82v-jwr5-mffw
13
reference_url https://github.com/vercel/next.js/releases/tag/v12.3.5
reference_id v12.3.5
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-08T15:16:38Z/
url https://github.com/vercel/next.js/releases/tag/v12.3.5
14
reference_url https://github.com/vercel/next.js/releases/tag/v13.5.9
reference_id v13.5.9
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-08T15:16:38Z/
url https://github.com/vercel/next.js/releases/tag/v13.5.9
fixed_packages
0
url pkg:npm/next@15.2.3
purl pkg:npm/next@15.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2rsy-25vf-cufu
2
vulnerability VCID-2wxy-d9mx-u7du
3
vulnerability VCID-4kgz-73xy-xyb2
4
vulnerability VCID-51mc-n64v-nugj
5
vulnerability VCID-5ehn-67ys-73h1
6
vulnerability VCID-6r5c-d48p-9qa4
7
vulnerability VCID-93c9-up9w-5fdv
8
vulnerability VCID-9r3b-phvp-xfck
9
vulnerability VCID-b2hu-vcgt-7ydr
10
vulnerability VCID-bjvd-79eg-17f3
11
vulnerability VCID-c9sc-ajq2-pyda
12
vulnerability VCID-gh18-cr6c-47hm
13
vulnerability VCID-gm62-hv3y-v7b8
14
vulnerability VCID-gsam-akzk-ukas
15
vulnerability VCID-haxf-nay6-v3hg
16
vulnerability VCID-p7a7-ehjr-xqf3
17
vulnerability VCID-t6n1-e9kc-hqgx
18
vulnerability VCID-uqrk-gg9y-5bfz
19
vulnerability VCID-wdsq-y8uf-2feh
20
vulnerability VCID-wgv6-ermy-yycy
21
vulnerability VCID-xzrf-tsxp-hqeg
22
vulnerability VCID-yddv-cunp-yyd7
23
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.2.3
aliases CVE-2025-29927, GHSA-f82v-jwr5-mffw
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s5uv-nxf7-rkbj
16
url VCID-t6n1-e9kc-hqgx
vulnerability_id VCID-t6n1-e9kc-hqgx
summary Next.js is a React framework for building full-stack web applications. Prior to versions 14.2.32 and 15.4.7, when next() was used without explicitly passing the request object, it could lead to SSRF in self-hosted applications that incorrectly forwarded user-supplied headers. This vulnerability has been fixed in Next.js versions 14.2.32 and 15.4.7. All users implementing custom middleware logic in self-hosted environments are strongly encouraged to upgrade and verify correct usage of the next() function.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-57822
reference_id
reference_type
scores
0
value 0.07815
scoring_system epss
scoring_elements 0.92168
published_at 2026-06-11T12:55:00Z
1
value 0.07815
scoring_system epss
scoring_elements 0.92195
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-57822
1
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-57822
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-57822
3
reference_url https://github.com/vercel/next.js/commit/9c9aaed5bb9338ef31b0517ccf0ab4414f2093d8
reference_id 9c9aaed5bb9338ef31b0517ccf0ab4414f2093d8
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-02T17:26:15Z/
url https://github.com/vercel/next.js/commit/9c9aaed5bb9338ef31b0517ccf0ab4414f2093d8
4
reference_url https://vercel.com/changelog/cve-2025-57822
reference_id cve-2025-57822
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-02T17:26:15Z/
url https://vercel.com/changelog/cve-2025-57822
5
reference_url https://github.com/advisories/GHSA-4342-x723-ch2f
reference_id GHSA-4342-x723-ch2f
reference_type
scores
url https://github.com/advisories/GHSA-4342-x723-ch2f
6
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-4342-x723-ch2f
reference_id GHSA-4342-x723-ch2f
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-02T17:26:15Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-4342-x723-ch2f
fixed_packages
0
url pkg:npm/next@15.4.7
purl pkg:npm/next@15.4.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2rsy-25vf-cufu
2
vulnerability VCID-2wxy-d9mx-u7du
3
vulnerability VCID-4kgz-73xy-xyb2
4
vulnerability VCID-51mc-n64v-nugj
5
vulnerability VCID-5ehn-67ys-73h1
6
vulnerability VCID-6r5c-d48p-9qa4
7
vulnerability VCID-93c9-up9w-5fdv
8
vulnerability VCID-9r3b-phvp-xfck
9
vulnerability VCID-b2hu-vcgt-7ydr
10
vulnerability VCID-bjvd-79eg-17f3
11
vulnerability VCID-c9sc-ajq2-pyda
12
vulnerability VCID-gh18-cr6c-47hm
13
vulnerability VCID-gm62-hv3y-v7b8
14
vulnerability VCID-haxf-nay6-v3hg
15
vulnerability VCID-uqrk-gg9y-5bfz
16
vulnerability VCID-w4pk-pmxb-c7fr
17
vulnerability VCID-wgv6-ermy-yycy
18
vulnerability VCID-xzrf-tsxp-hqeg
19
vulnerability VCID-yddv-cunp-yyd7
20
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.4.7
aliases CVE-2025-57822, GHSA-4342-x723-ch2f
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t6n1-e9kc-hqgx
17
url VCID-uqrk-gg9y-5bfz
vulnerability_id VCID-uqrk-gg9y-5bfz
summary Next.js is a React framework for building full-stack web applications. Starting in version 10.0.0 and prior to version 16.1.7, the default Next.js image optimization disk cache (`/_next/image`) did not have a configurable upper bound, allowing unbounded cache growth. An attacker could generate many unique image-optimization variants and exhaust disk space, causing denial of service. This is fixed in version 16.1.7 by adding an LRU-backed disk cache with `images.maximumDiskCacheSize`, including eviction of least-recently-used entries when the limit is exceeded. Setting `maximumDiskCacheSize: 0` disables disk caching. If upgrading is not immediately possible, periodically clean `.next/cache/images` and/or reduce variant cardinality (e.g., tighten values for `images.localPatterns`, `images.remotePatterns`, and `images.qualities`).
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-27980.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-27980.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-27980
reference_id
reference_type
scores
0
value 0.00023
scoring_system epss
scoring_elements 0.06863
published_at 2026-06-11T12:55:00Z
1
value 0.00023
scoring_system epss
scoring_elements 0.06888
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-27980
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-27980
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-27980
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2448509
reference_id 2448509
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2448509
5
reference_url https://github.com/vercel/next.js/commit/39eb8e0ac498b48855a0430fbf4c22276a73b4bd
reference_id 39eb8e0ac498b48855a0430fbf4c22276a73b4bd
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-18T19:50:06Z/
url https://github.com/vercel/next.js/commit/39eb8e0ac498b48855a0430fbf4c22276a73b4bd
6
reference_url https://github.com/advisories/GHSA-3x4c-7xq6-9pq8
reference_id GHSA-3x4c-7xq6-9pq8
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3x4c-7xq6-9pq8
7
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-3x4c-7xq6-9pq8
reference_id GHSA-3x4c-7xq6-9pq8
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-18T19:50:06Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-3x4c-7xq6-9pq8
8
reference_url https://access.redhat.com/errata/RHSA-2026:13571
reference_id RHSA-2026:13571
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:13571
9
reference_url https://github.com/vercel/next.js/releases/tag/v16.1.7
reference_id v16.1.7
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-18T19:50:06Z/
url https://github.com/vercel/next.js/releases/tag/v16.1.7
fixed_packages
0
url pkg:npm/next@15.5.14
purl pkg:npm/next@15.5.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wxy-d9mx-u7du
1
vulnerability VCID-4kgz-73xy-xyb2
2
vulnerability VCID-5ehn-67ys-73h1
3
vulnerability VCID-6r5c-d48p-9qa4
4
vulnerability VCID-93c9-up9w-5fdv
5
vulnerability VCID-9r3b-phvp-xfck
6
vulnerability VCID-b2hu-vcgt-7ydr
7
vulnerability VCID-gh18-cr6c-47hm
8
vulnerability VCID-haxf-nay6-v3hg
9
vulnerability VCID-w4pk-pmxb-c7fr
10
vulnerability VCID-wgv6-ermy-yycy
11
vulnerability VCID-xzrf-tsxp-hqeg
12
vulnerability VCID-yddv-cunp-yyd7
13
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.14
1
url pkg:npm/next@15.6.0-canary.0
purl pkg:npm/next@15.6.0-canary.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-51mc-n64v-nugj
2
vulnerability VCID-c9sc-ajq2-pyda
3
vulnerability VCID-gm62-hv3y-v7b8
4
vulnerability VCID-v7dq-7t8n-j7b5
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.6.0-canary.0
2
url pkg:npm/next@16.1.7
purl pkg:npm/next@16.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wxy-d9mx-u7du
1
vulnerability VCID-4kgz-73xy-xyb2
2
vulnerability VCID-5ehn-67ys-73h1
3
vulnerability VCID-6r5c-d48p-9qa4
4
vulnerability VCID-93c9-up9w-5fdv
5
vulnerability VCID-9r3b-phvp-xfck
6
vulnerability VCID-b2hu-vcgt-7ydr
7
vulnerability VCID-gh18-cr6c-47hm
8
vulnerability VCID-haxf-nay6-v3hg
9
vulnerability VCID-w4pk-pmxb-c7fr
10
vulnerability VCID-wgv6-ermy-yycy
11
vulnerability VCID-xzrf-tsxp-hqeg
12
vulnerability VCID-yddv-cunp-yyd7
13
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.1.7
aliases CVE-2026-27980, GHSA-3x4c-7xq6-9pq8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uqrk-gg9y-5bfz
18
url VCID-v7dq-7t8n-j7b5
vulnerability_id VCID-v7dq-7t8n-j7b5
summary 
A denial of service vulnerability exists in Next.js versions with Partial Prerendering (PPR) enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the `Next-Resume: 1` header and processes attacker-controlled postponed state data. Two closely related vulnerabilities allow an attacker to crash the server process through memory exhaustion:

1. **Unbounded request body buffering**: The server buffers the entire POST request body into memory using `Buffer.concat()` without enforcing any size limit, allowing arbitrarily large payloads to exhaust available memory.

2. **Unbounded decompression (zipbomb)**: The resume data cache is decompressed using `inflateSync()` without limiting the decompressed output size. A small compressed payload can expand to hundreds of megabytes or gigabytes, causing memory exhaustion.

Both attack vectors result in a fatal V8 out-of-memory error (`FATAL ERROR: Reached heap limit Allocation failed - JavaScript heap out of memory`) causing the Node.js process to terminate. The zipbomb variant is particularly dangerous as it can bypass reverse proxy request size limits while still causing large memory allocation on the server.

To be affected you must have an application running with `experimental.ppr: true` or `cacheComponents: true` configured along with the NEXT_PRIVATE_MINIMAL_MODE=1 environment variable.

Strongly consider upgrading to 15.6.0-canary.61 or 16.1.5 to reduce risk and prevent availability issues in Next applications.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-59472.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-59472.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-59472
reference_id
reference_type
scores
0
value 0.0015
scoring_system epss
scoring_elements 0.35478
published_at 2026-06-12T12:55:00Z
1
value 0.0015
scoring_system epss
scoring_elements 0.35299
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-59472
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2433092
reference_id 2433092
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2433092
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-59472
reference_id CVE-2025-59472
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-59472
6
reference_url https://github.com/advisories/GHSA-5f7q-jpqc-wp7h
reference_id GHSA-5f7q-jpqc-wp7h
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5f7q-jpqc-wp7h
7
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-5f7q-jpqc-wp7h
reference_id GHSA-5f7q-jpqc-wp7h
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-27T14:52:42Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-5f7q-jpqc-wp7h
fixed_packages
0
url pkg:npm/next@15.2.0
purl pkg:npm/next@15.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2rsy-25vf-cufu
2
vulnerability VCID-2wxy-d9mx-u7du
3
vulnerability VCID-4kgz-73xy-xyb2
4
vulnerability VCID-51mc-n64v-nugj
5
vulnerability VCID-5ehn-67ys-73h1
6
vulnerability VCID-6r5c-d48p-9qa4
7
vulnerability VCID-93c9-up9w-5fdv
8
vulnerability VCID-9r3b-phvp-xfck
9
vulnerability VCID-b2hu-vcgt-7ydr
10
vulnerability VCID-bjvd-79eg-17f3
11
vulnerability VCID-c9sc-ajq2-pyda
12
vulnerability VCID-gh18-cr6c-47hm
13
vulnerability VCID-gm62-hv3y-v7b8
14
vulnerability VCID-haxf-nay6-v3hg
15
vulnerability VCID-mv21-m5nh-vygs
16
vulnerability VCID-p7a7-ehjr-xqf3
17
vulnerability VCID-s5uv-nxf7-rkbj
18
vulnerability VCID-t6n1-e9kc-hqgx
19
vulnerability VCID-uqrk-gg9y-5bfz
20
vulnerability VCID-wdsq-y8uf-2feh
21
vulnerability VCID-wgv6-ermy-yycy
22
vulnerability VCID-xzrf-tsxp-hqeg
23
vulnerability VCID-yddv-cunp-yyd7
24
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.2.0
1
url pkg:npm/next@15.2.1
purl pkg:npm/next@15.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2rsy-25vf-cufu
2
vulnerability VCID-2wxy-d9mx-u7du
3
vulnerability VCID-4kgz-73xy-xyb2
4
vulnerability VCID-51mc-n64v-nugj
5
vulnerability VCID-5ehn-67ys-73h1
6
vulnerability VCID-6r5c-d48p-9qa4
7
vulnerability VCID-93c9-up9w-5fdv
8
vulnerability VCID-9r3b-phvp-xfck
9
vulnerability VCID-b2hu-vcgt-7ydr
10
vulnerability VCID-bjvd-79eg-17f3
11
vulnerability VCID-c9sc-ajq2-pyda
12
vulnerability VCID-gh18-cr6c-47hm
13
vulnerability VCID-gm62-hv3y-v7b8
14
vulnerability VCID-haxf-nay6-v3hg
15
vulnerability VCID-mv21-m5nh-vygs
16
vulnerability VCID-p7a7-ehjr-xqf3
17
vulnerability VCID-s5uv-nxf7-rkbj
18
vulnerability VCID-t6n1-e9kc-hqgx
19
vulnerability VCID-uqrk-gg9y-5bfz
20
vulnerability VCID-wdsq-y8uf-2feh
21
vulnerability VCID-wgv6-ermy-yycy
22
vulnerability VCID-xzrf-tsxp-hqeg
23
vulnerability VCID-yddv-cunp-yyd7
24
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.2.1
2
url pkg:npm/next@15.2.2
purl pkg:npm/next@15.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2rsy-25vf-cufu
2
vulnerability VCID-2wxy-d9mx-u7du
3
vulnerability VCID-4kgz-73xy-xyb2
4
vulnerability VCID-51mc-n64v-nugj
5
vulnerability VCID-5ehn-67ys-73h1
6
vulnerability VCID-6r5c-d48p-9qa4
7
vulnerability VCID-93c9-up9w-5fdv
8
vulnerability VCID-9r3b-phvp-xfck
9
vulnerability VCID-b2hu-vcgt-7ydr
10
vulnerability VCID-bjvd-79eg-17f3
11
vulnerability VCID-c9sc-ajq2-pyda
12
vulnerability VCID-gh18-cr6c-47hm
13
vulnerability VCID-gm62-hv3y-v7b8
14
vulnerability VCID-haxf-nay6-v3hg
15
vulnerability VCID-p7a7-ehjr-xqf3
16
vulnerability VCID-s5uv-nxf7-rkbj
17
vulnerability VCID-t6n1-e9kc-hqgx
18
vulnerability VCID-uqrk-gg9y-5bfz
19
vulnerability VCID-wdsq-y8uf-2feh
20
vulnerability VCID-wgv6-ermy-yycy
21
vulnerability VCID-xzrf-tsxp-hqeg
22
vulnerability VCID-yddv-cunp-yyd7
23
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.2.2
3
url pkg:npm/next@15.3.0
purl pkg:npm/next@15.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2rsy-25vf-cufu
2
vulnerability VCID-2wxy-d9mx-u7du
3
vulnerability VCID-4kgz-73xy-xyb2
4
vulnerability VCID-51mc-n64v-nugj
5
vulnerability VCID-5ehn-67ys-73h1
6
vulnerability VCID-6r5c-d48p-9qa4
7
vulnerability VCID-6u6c-nuys-c3a3
8
vulnerability VCID-93c9-up9w-5fdv
9
vulnerability VCID-9r3b-phvp-xfck
10
vulnerability VCID-b2hu-vcgt-7ydr
11
vulnerability VCID-bjvd-79eg-17f3
12
vulnerability VCID-c9sc-ajq2-pyda
13
vulnerability VCID-gh18-cr6c-47hm
14
vulnerability VCID-gm62-hv3y-v7b8
15
vulnerability VCID-haxf-nay6-v3hg
16
vulnerability VCID-p7a7-ehjr-xqf3
17
vulnerability VCID-t6n1-e9kc-hqgx
18
vulnerability VCID-uqrk-gg9y-5bfz
19
vulnerability VCID-wdsq-y8uf-2feh
20
vulnerability VCID-wgv6-ermy-yycy
21
vulnerability VCID-xzrf-tsxp-hqeg
22
vulnerability VCID-yddv-cunp-yyd7
23
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.3.0
4
url pkg:npm/next@15.3.1
purl pkg:npm/next@15.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2rsy-25vf-cufu
2
vulnerability VCID-2wxy-d9mx-u7du
3
vulnerability VCID-4kgz-73xy-xyb2
4
vulnerability VCID-51mc-n64v-nugj
5
vulnerability VCID-5ehn-67ys-73h1
6
vulnerability VCID-6r5c-d48p-9qa4
7
vulnerability VCID-6u6c-nuys-c3a3
8
vulnerability VCID-93c9-up9w-5fdv
9
vulnerability VCID-9r3b-phvp-xfck
10
vulnerability VCID-b2hu-vcgt-7ydr
11
vulnerability VCID-bjvd-79eg-17f3
12
vulnerability VCID-c9sc-ajq2-pyda
13
vulnerability VCID-gh18-cr6c-47hm
14
vulnerability VCID-gm62-hv3y-v7b8
15
vulnerability VCID-haxf-nay6-v3hg
16
vulnerability VCID-p7a7-ehjr-xqf3
17
vulnerability VCID-t6n1-e9kc-hqgx
18
vulnerability VCID-uqrk-gg9y-5bfz
19
vulnerability VCID-wdsq-y8uf-2feh
20
vulnerability VCID-wgv6-ermy-yycy
21
vulnerability VCID-xzrf-tsxp-hqeg
22
vulnerability VCID-yddv-cunp-yyd7
23
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.3.1
5
url pkg:npm/next@15.4.0
purl pkg:npm/next@15.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2rsy-25vf-cufu
2
vulnerability VCID-2wxy-d9mx-u7du
3
vulnerability VCID-4kgz-73xy-xyb2
4
vulnerability VCID-51mc-n64v-nugj
5
vulnerability VCID-5ehn-67ys-73h1
6
vulnerability VCID-6r5c-d48p-9qa4
7
vulnerability VCID-93c9-up9w-5fdv
8
vulnerability VCID-9r3b-phvp-xfck
9
vulnerability VCID-b2hu-vcgt-7ydr
10
vulnerability VCID-bjvd-79eg-17f3
11
vulnerability VCID-c9sc-ajq2-pyda
12
vulnerability VCID-gh18-cr6c-47hm
13
vulnerability VCID-gm62-hv3y-v7b8
14
vulnerability VCID-haxf-nay6-v3hg
15
vulnerability VCID-p7a7-ehjr-xqf3
16
vulnerability VCID-t6n1-e9kc-hqgx
17
vulnerability VCID-uqrk-gg9y-5bfz
18
vulnerability VCID-w4pk-pmxb-c7fr
19
vulnerability VCID-wdsq-y8uf-2feh
20
vulnerability VCID-wgv6-ermy-yycy
21
vulnerability VCID-xzrf-tsxp-hqeg
22
vulnerability VCID-yddv-cunp-yyd7
23
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.4.0
6
url pkg:npm/next@15.4.2
purl pkg:npm/next@15.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2rsy-25vf-cufu
2
vulnerability VCID-2wxy-d9mx-u7du
3
vulnerability VCID-4kgz-73xy-xyb2
4
vulnerability VCID-51mc-n64v-nugj
5
vulnerability VCID-5ehn-67ys-73h1
6
vulnerability VCID-6r5c-d48p-9qa4
7
vulnerability VCID-93c9-up9w-5fdv
8
vulnerability VCID-9r3b-phvp-xfck
9
vulnerability VCID-b2hu-vcgt-7ydr
10
vulnerability VCID-bjvd-79eg-17f3
11
vulnerability VCID-c9sc-ajq2-pyda
12
vulnerability VCID-gh18-cr6c-47hm
13
vulnerability VCID-gm62-hv3y-v7b8
14
vulnerability VCID-haxf-nay6-v3hg
15
vulnerability VCID-p7a7-ehjr-xqf3
16
vulnerability VCID-t6n1-e9kc-hqgx
17
vulnerability VCID-uqrk-gg9y-5bfz
18
vulnerability VCID-w4pk-pmxb-c7fr
19
vulnerability VCID-wdsq-y8uf-2feh
20
vulnerability VCID-wgv6-ermy-yycy
21
vulnerability VCID-xzrf-tsxp-hqeg
22
vulnerability VCID-yddv-cunp-yyd7
23
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.4.2
7
url pkg:npm/next@15.5.1
purl pkg:npm/next@15.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2rsy-25vf-cufu
2
vulnerability VCID-2wxy-d9mx-u7du
3
vulnerability VCID-4kgz-73xy-xyb2
4
vulnerability VCID-51mc-n64v-nugj
5
vulnerability VCID-5ehn-67ys-73h1
6
vulnerability VCID-6r5c-d48p-9qa4
7
vulnerability VCID-93c9-up9w-5fdv
8
vulnerability VCID-9r3b-phvp-xfck
9
vulnerability VCID-b2hu-vcgt-7ydr
10
vulnerability VCID-bjvd-79eg-17f3
11
vulnerability VCID-c9sc-ajq2-pyda
12
vulnerability VCID-gh18-cr6c-47hm
13
vulnerability VCID-gm62-hv3y-v7b8
14
vulnerability VCID-haxf-nay6-v3hg
15
vulnerability VCID-uqrk-gg9y-5bfz
16
vulnerability VCID-w4pk-pmxb-c7fr
17
vulnerability VCID-wgv6-ermy-yycy
18
vulnerability VCID-xzrf-tsxp-hqeg
19
vulnerability VCID-yddv-cunp-yyd7
20
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.1
8
url pkg:npm/next@15.6.0-canary.61
purl pkg:npm/next@15.6.0-canary.61
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.6.0-canary.61
9
url pkg:npm/next@16.1.5
purl pkg:npm/next@16.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wxy-d9mx-u7du
1
vulnerability VCID-4kgz-73xy-xyb2
2
vulnerability VCID-51r9-nmc2-tyc7
3
vulnerability VCID-5ehn-67ys-73h1
4
vulnerability VCID-6r5c-d48p-9qa4
5
vulnerability VCID-93c9-up9w-5fdv
6
vulnerability VCID-9r3b-phvp-xfck
7
vulnerability VCID-b2hu-vcgt-7ydr
8
vulnerability VCID-bjvd-79eg-17f3
9
vulnerability VCID-chsk-ka34-yqaf
10
vulnerability VCID-gh18-cr6c-47hm
11
vulnerability VCID-haxf-nay6-v3hg
12
vulnerability VCID-qptg-e7c6-puhs
13
vulnerability VCID-uqrk-gg9y-5bfz
14
vulnerability VCID-w4pk-pmxb-c7fr
15
vulnerability VCID-wgv6-ermy-yycy
16
vulnerability VCID-xzrf-tsxp-hqeg
17
vulnerability VCID-yddv-cunp-yyd7
18
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.1.5
aliases CVE-2025-59472, GHSA-5f7q-jpqc-wp7h
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v7dq-7t8n-j7b5
19
url VCID-wdsq-y8uf-2feh
vulnerability_id VCID-wdsq-y8uf-2feh
summary Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization is vulnerable to content injection. The issue allowed attacker-controlled external image sources to trigger file downloads with arbitrary content and filenames under specific configurations. This behavior could be abused for phishing or malicious file delivery. This vulnerability has been fixed in Next.js versions 14.2.31 and 15.4.5.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-55173.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-55173.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-55173
reference_id
reference_type
scores
0
value 0.00687
scoring_system epss
scoring_elements 0.72209
published_at 2026-06-11T12:55:00Z
1
value 0.00687
scoring_system epss
scoring_elements 0.72292
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-55173
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-55173
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-55173
4
reference_url http://vercel.com/changelog/cve-2025-55173
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://vercel.com/changelog/cve-2025-55173
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2392059
reference_id 2392059
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2392059
6
reference_url https://github.com/vercel/next.js/commit/6b12c60c61ee80cb0443ccd20de82ca9b4422ddd
reference_id 6b12c60c61ee80cb0443ccd20de82ca9b4422ddd
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-02T19:22:48Z/
url https://github.com/vercel/next.js/commit/6b12c60c61ee80cb0443ccd20de82ca9b4422ddd
7
reference_url https://vercel.com/changelog/cve-2025-55173
reference_id cve-2025-55173
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-02T19:22:48Z/
url https://vercel.com/changelog/cve-2025-55173
8
reference_url https://github.com/advisories/GHSA-xv57-4mr9-wg8v
reference_id GHSA-xv57-4mr9-wg8v
reference_type
scores
url https://github.com/advisories/GHSA-xv57-4mr9-wg8v
9
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-xv57-4mr9-wg8v
reference_id GHSA-xv57-4mr9-wg8v
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-02T19:22:48Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-xv57-4mr9-wg8v
fixed_packages
0
url pkg:npm/next@15.4.5
purl pkg:npm/next@15.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-jgck-2kb2
1
vulnerability VCID-2rsy-25vf-cufu
2
vulnerability VCID-2wxy-d9mx-u7du
3
vulnerability VCID-4kgz-73xy-xyb2
4
vulnerability VCID-51mc-n64v-nugj
5
vulnerability VCID-5ehn-67ys-73h1
6
vulnerability VCID-6r5c-d48p-9qa4
7
vulnerability VCID-93c9-up9w-5fdv
8
vulnerability VCID-9r3b-phvp-xfck
9
vulnerability VCID-b2hu-vcgt-7ydr
10
vulnerability VCID-bjvd-79eg-17f3
11
vulnerability VCID-c9sc-ajq2-pyda
12
vulnerability VCID-gh18-cr6c-47hm
13
vulnerability VCID-gm62-hv3y-v7b8
14
vulnerability VCID-haxf-nay6-v3hg
15
vulnerability VCID-t6n1-e9kc-hqgx
16
vulnerability VCID-uqrk-gg9y-5bfz
17
vulnerability VCID-w4pk-pmxb-c7fr
18
vulnerability VCID-wgv6-ermy-yycy
19
vulnerability VCID-xzrf-tsxp-hqeg
20
vulnerability VCID-yddv-cunp-yyd7
21
vulnerability VCID-zrny-u44x-3fh1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.4.5
aliases CVE-2025-55173, GHSA-xv57-4mr9-wg8v
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wdsq-y8uf-2feh
20
url VCID-wgv6-ermy-yycy
vulnerability_id VCID-wgv6-ermy-yycy
summary Next.js is a React framework for building full-stack web applications. From 13.4.0 to before 15.5.16 and 16.2.5, App Router applications that rely on CSP nonces can be vulnerable to stored cross-site scripting when deployed behind shared caches. In affected versions, malformed nonce values derived from request headers could be reflected into rendered HTML in an unsafe way, allowing an attacker to poison cached responses and cause script execution for later visitors. This vulnerability is fixed in 15.5.16 and 16.2.5.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44581.json
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44581.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-44581
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01454
published_at 2026-06-12T12:55:00Z
1
value 0.00011
scoring_system epss
scoring_elements 0.01451
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-44581
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://github.com/vercel/next.js/releases/tag/v15.5.16
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v15.5.16
4
reference_url https://github.com/vercel/next.js/releases/tag/v16.2.5
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v16.2.5
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-44581
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-44581
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2477191
reference_id 2477191
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2477191
7
reference_url https://github.com/advisories/GHSA-ffhc-5mcf-pf4q
reference_id GHSA-ffhc-5mcf-pf4q
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-ffhc-5mcf-pf4q
8
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q
reference_id GHSA-ffhc-5mcf-pf4q
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-18T14:12:36Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q
fixed_packages
0
url pkg:npm/next@15.5.16
purl pkg:npm/next@15.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.16
1
url pkg:npm/next@16.2.5
purl pkg:npm/next@16.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.2.5
aliases CVE-2026-44581, GHSA-ffhc-5mcf-pf4q
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wgv6-ermy-yycy
21
url VCID-xzrf-tsxp-hqeg
vulnerability_id VCID-xzrf-tsxp-hqeg
summary Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, an external client could send a x-nextjs-data header on a normal request to a path handled by middleware that returns a redirect. When that happened, the middleware/proxy could treat the request as a data request and replace the standard Location redirect header with the internal x-nextjs-redirect header. Browsers do not follow x-nextjs-redirect, so the response became an unusable redirect for normal clients. If the application was deployed behind a CDN or reverse proxy that caches 3xx responses without varying on this header, a single attacker request could poison the cached redirect response for the affected path. Subsequent visitors could then receive a cached redirect response without a Location header, causing a denial of service for that redirect path until the cache entry expired or was purged. This vulnerability is fixed in 15.5.16 and 16.2.5.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44572.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44572.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-44572
reference_id
reference_type
scores
0
value 8e-05
scoring_system epss
scoring_elements 0.00786
published_at 2026-06-12T12:55:00Z
1
value 8e-05
scoring_system epss
scoring_elements 0.00788
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-44572
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://github.com/vercel/next.js/releases/tag/v15.5.16
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v15.5.16
4
reference_url https://github.com/vercel/next.js/releases/tag/v16.2.5
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v16.2.5
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-44572
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-44572
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2477168
reference_id 2477168
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2477168
7
reference_url https://github.com/advisories/GHSA-3g8h-86w9-wvmq
reference_id GHSA-3g8h-86w9-wvmq
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3g8h-86w9-wvmq
8
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq
reference_id GHSA-3g8h-86w9-wvmq
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-14T15:32:48Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq
fixed_packages
0
url pkg:npm/next@15.5.16
purl pkg:npm/next@15.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.16
1
url pkg:npm/next@16.2.5
purl pkg:npm/next@16.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.2.5
aliases CVE-2026-44572, GHSA-3g8h-86w9-wvmq
risk_score 2.6
exploitability 0.5
weighted_severity 5.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xzrf-tsxp-hqeg
22
url VCID-yddv-cunp-yyd7
vulnerability_id VCID-yddv-cunp-yyd7
summary Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to server-side request forgery through crafted WebSocket upgrade requests. An attacker can cause the server to proxy requests to arbitrary internal or external destinations, which may expose internal services or cloud metadata endpoints. Vercel-hosted deployments are not affected. This vulnerability is fixed in 15.5.16 and 16.2.5.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44578.json
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-44578.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-44578
reference_id
reference_type
scores
0
value 0.07215
scoring_system epss
scoring_elements 0.91829
published_at 2026-06-12T12:55:00Z
1
value 0.07215
scoring_system epss
scoring_elements 0.91801
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-44578
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://github.com/vercel/next.js/releases/tag/v15.5.16
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v15.5.16
4
reference_url https://github.com/vercel/next.js/releases/tag/v16.2.5
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/releases/tag/v16.2.5
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-44578
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-44578
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2477187
reference_id 2477187
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2477187
7
reference_url https://github.com/advisories/GHSA-c4j6-fc7j-m34r
reference_id GHSA-c4j6-fc7j-m34r
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c4j6-fc7j-m34r
8
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r
reference_id GHSA-c4j6-fc7j-m34r
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-13T18:09:06Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r
fixed_packages
0
url pkg:npm/next@15.5.16
purl pkg:npm/next@15.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.16
1
url pkg:npm/next@16.2.5
purl pkg:npm/next@16.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.2.5
aliases CVE-2026-44578, GHSA-c4j6-fc7j-m34r
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yddv-cunp-yyd7
23
url VCID-zrny-u44x-3fh1
vulnerability_id VCID-zrny-u44x-3fh1
summary 
Next.js Vulnerable to Denial of Service with Server Components
A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23870](https://github.com/facebook/react/security/advisories/GHSA-rv78-f8rc-xrxh). 

A specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.
references
0
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
1
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj
2
reference_url https://github.com/vitejs/vite-plugin-react/security/advisories/GHSA-w94c-4vhp-22gx
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vitejs/vite-plugin-react/security/advisories/GHSA-w94c-4vhp-22gx
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-23870
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-23870
4
reference_url https://github.com/advisories/GHSA-8h8q-6873-q5fj
reference_id GHSA-8h8q-6873-q5fj
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8h8q-6873-q5fj
5
reference_url https://github.com/facebook/react/security/advisories/GHSA-rv78-f8rc-xrxh
reference_id GHSA-rv78-f8rc-xrxh
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/facebook/react/security/advisories/GHSA-rv78-f8rc-xrxh
fixed_packages
0
url pkg:npm/next@15.5.16
purl pkg:npm/next@15.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.5.16
1
url pkg:npm/next@16.2.5
purl pkg:npm/next@16.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh18-cr6c-47hm
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@16.2.5
aliases GHSA-8h8q-6873-q5fj
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zrny-u44x-3fh1
Fixing_vulnerabilities
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/next@15.2.0-canary.24