Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-dyak-ybr6-fyhy
Summary
Next.JS vulnerability can lead to DoS via cache poisoning
### Summary
A vulnerability affecting Next.js has been addressed. It impacted versions 15.0.4 through 15.1.8 and involved a cache poisoning bug leading to a Denial of Service (DoS) condition.

Under certain conditions, this issue may allow a HTTP 204 response to be cached for static pages, leading to the 204 response being served to all users attempting to access the page

More details: [CVE-2025-49826](https://vercel.com/changelog/cve-2025-49826)

## Credits
- Allam Rachid [zhero;](https://zhero-web-sec.github.io/research-and-things/)
- Allam Yasser (inzo)
Aliases
0
alias CVE-2025-49826
1
alias GHSA-67rr-84xm-4c7r
Fixed_packages
0
url pkg:npm/next@15.1.8
purl pkg:npm/next@15.1.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-54qu-9bx2-9ka8
4
vulnerability VCID-5kj1-stm6-8qgv
5
vulnerability VCID-pqwe-3ukm-dkh4
6
vulnerability VCID-qz2s-22e2-ufg9
7
vulnerability VCID-r4pw-m8mz-xbdq
8
vulnerability VCID-sjdx-v2z6-3fcw
9
vulnerability VCID-ub68-nqch-bkdm
10
vulnerability VCID-w35n-bwuy-5kce
11
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.8
Affected_packages
0
url pkg:npm/next@15.0.4-canary.51
purl pkg:npm/next@15.0.4-canary.51
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.0.4-canary.51
1
url pkg:npm/next@15.0.4-canary.52
purl pkg:npm/next@15.0.4-canary.52
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.0.4-canary.52
2
url pkg:npm/next@15.0.4
purl pkg:npm/next@15.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.0.4
3
url pkg:npm/next@15.1.0
purl pkg:npm/next@15.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3m4d-v2y1-5ua4
1
vulnerability VCID-3szn-4nn4-3fek
2
vulnerability VCID-54qu-9bx2-9ka8
3
vulnerability VCID-5kj1-stm6-8qgv
4
vulnerability VCID-dyak-ybr6-fyhy
5
vulnerability VCID-jst7-263v-1ydx
6
vulnerability VCID-pqwe-3ukm-dkh4
7
vulnerability VCID-qz2s-22e2-ufg9
8
vulnerability VCID-r4pw-m8mz-xbdq
9
vulnerability VCID-sjdx-v2z6-3fcw
10
vulnerability VCID-ub68-nqch-bkdm
11
vulnerability VCID-vwym-qr5h-fue8
12
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.0
4
url pkg:npm/next@15.1.1-canary.0
purl pkg:npm/next@15.1.1-canary.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.0
5
url pkg:npm/next@15.1.1-canary.1
purl pkg:npm/next@15.1.1-canary.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.1
6
url pkg:npm/next@15.1.1-canary.2
purl pkg:npm/next@15.1.1-canary.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.2
7
url pkg:npm/next@15.1.1-canary.3
purl pkg:npm/next@15.1.1-canary.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.3
8
url pkg:npm/next@15.1.1-canary.4
purl pkg:npm/next@15.1.1-canary.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.4
9
url pkg:npm/next@15.1.1-canary.5
purl pkg:npm/next@15.1.1-canary.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.5
10
url pkg:npm/next@15.1.1-canary.6
purl pkg:npm/next@15.1.1-canary.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.6
11
url pkg:npm/next@15.1.1-canary.7
purl pkg:npm/next@15.1.1-canary.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.7
12
url pkg:npm/next@15.1.1-canary.10
purl pkg:npm/next@15.1.1-canary.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.10
13
url pkg:npm/next@15.1.1-canary.11
purl pkg:npm/next@15.1.1-canary.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.11
14
url pkg:npm/next@15.1.1-canary.12
purl pkg:npm/next@15.1.1-canary.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.12
15
url pkg:npm/next@15.1.1-canary.13
purl pkg:npm/next@15.1.1-canary.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.13
16
url pkg:npm/next@15.1.1-canary.14
purl pkg:npm/next@15.1.1-canary.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.14
17
url pkg:npm/next@15.1.1-canary.15
purl pkg:npm/next@15.1.1-canary.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.15
18
url pkg:npm/next@15.1.1-canary.16
purl pkg:npm/next@15.1.1-canary.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.16
19
url pkg:npm/next@15.1.1-canary.17
purl pkg:npm/next@15.1.1-canary.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.17
20
url pkg:npm/next@15.1.1-canary.18
purl pkg:npm/next@15.1.1-canary.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.18
21
url pkg:npm/next@15.1.1-canary.19
purl pkg:npm/next@15.1.1-canary.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.19
22
url pkg:npm/next@15.1.1-canary.20
purl pkg:npm/next@15.1.1-canary.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.20
23
url pkg:npm/next@15.1.1-canary.21
purl pkg:npm/next@15.1.1-canary.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.21
24
url pkg:npm/next@15.1.1-canary.22
purl pkg:npm/next@15.1.1-canary.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.22
25
url pkg:npm/next@15.1.1-canary.23
purl pkg:npm/next@15.1.1-canary.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.23
26
url pkg:npm/next@15.1.1-canary.24
purl pkg:npm/next@15.1.1-canary.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.24
27
url pkg:npm/next@15.1.1-canary.25
purl pkg:npm/next@15.1.1-canary.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-54qu-9bx2-9ka8
4
vulnerability VCID-5kj1-stm6-8qgv
5
vulnerability VCID-dyak-ybr6-fyhy
6
vulnerability VCID-jst7-263v-1ydx
7
vulnerability VCID-pqwe-3ukm-dkh4
8
vulnerability VCID-qz2s-22e2-ufg9
9
vulnerability VCID-r4pw-m8mz-xbdq
10
vulnerability VCID-sjdx-v2z6-3fcw
11
vulnerability VCID-ub68-nqch-bkdm
12
vulnerability VCID-vwym-qr5h-fue8
13
vulnerability VCID-w35n-bwuy-5kce
14
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.25
28
url pkg:npm/next@15.1.1-canary.26
purl pkg:npm/next@15.1.1-canary.26
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-54qu-9bx2-9ka8
4
vulnerability VCID-5kj1-stm6-8qgv
5
vulnerability VCID-dyak-ybr6-fyhy
6
vulnerability VCID-jst7-263v-1ydx
7
vulnerability VCID-pqwe-3ukm-dkh4
8
vulnerability VCID-qz2s-22e2-ufg9
9
vulnerability VCID-r4pw-m8mz-xbdq
10
vulnerability VCID-sjdx-v2z6-3fcw
11
vulnerability VCID-ub68-nqch-bkdm
12
vulnerability VCID-vwym-qr5h-fue8
13
vulnerability VCID-w35n-bwuy-5kce
14
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.26
29
url pkg:npm/next@15.1.1-canary.27
purl pkg:npm/next@15.1.1-canary.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-54qu-9bx2-9ka8
4
vulnerability VCID-5kj1-stm6-8qgv
5
vulnerability VCID-dyak-ybr6-fyhy
6
vulnerability VCID-jst7-263v-1ydx
7
vulnerability VCID-pqwe-3ukm-dkh4
8
vulnerability VCID-qz2s-22e2-ufg9
9
vulnerability VCID-r4pw-m8mz-xbdq
10
vulnerability VCID-sjdx-v2z6-3fcw
11
vulnerability VCID-ub68-nqch-bkdm
12
vulnerability VCID-vwym-qr5h-fue8
13
vulnerability VCID-w35n-bwuy-5kce
14
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1-canary.27
30
url pkg:npm/next@15.1.1
purl pkg:npm/next@15.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-3szn-4nn4-3fek
4
vulnerability VCID-54qu-9bx2-9ka8
5
vulnerability VCID-5kj1-stm6-8qgv
6
vulnerability VCID-dyak-ybr6-fyhy
7
vulnerability VCID-jst7-263v-1ydx
8
vulnerability VCID-pqwe-3ukm-dkh4
9
vulnerability VCID-qz2s-22e2-ufg9
10
vulnerability VCID-r4pw-m8mz-xbdq
11
vulnerability VCID-sjdx-v2z6-3fcw
12
vulnerability VCID-ub68-nqch-bkdm
13
vulnerability VCID-vwym-qr5h-fue8
14
vulnerability VCID-w35n-bwuy-5kce
15
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.1
31
url pkg:npm/next@15.1.2
purl pkg:npm/next@15.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-54qu-9bx2-9ka8
4
vulnerability VCID-5kj1-stm6-8qgv
5
vulnerability VCID-dyak-ybr6-fyhy
6
vulnerability VCID-jst7-263v-1ydx
7
vulnerability VCID-pqwe-3ukm-dkh4
8
vulnerability VCID-qz2s-22e2-ufg9
9
vulnerability VCID-r4pw-m8mz-xbdq
10
vulnerability VCID-sjdx-v2z6-3fcw
11
vulnerability VCID-ub68-nqch-bkdm
12
vulnerability VCID-vwym-qr5h-fue8
13
vulnerability VCID-w35n-bwuy-5kce
14
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.2
32
url pkg:npm/next@15.1.3
purl pkg:npm/next@15.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-54qu-9bx2-9ka8
4
vulnerability VCID-5kj1-stm6-8qgv
5
vulnerability VCID-dyak-ybr6-fyhy
6
vulnerability VCID-jst7-263v-1ydx
7
vulnerability VCID-pqwe-3ukm-dkh4
8
vulnerability VCID-qz2s-22e2-ufg9
9
vulnerability VCID-r4pw-m8mz-xbdq
10
vulnerability VCID-sjdx-v2z6-3fcw
11
vulnerability VCID-ub68-nqch-bkdm
12
vulnerability VCID-vwym-qr5h-fue8
13
vulnerability VCID-w35n-bwuy-5kce
14
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.3
33
url pkg:npm/next@15.1.4
purl pkg:npm/next@15.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-54qu-9bx2-9ka8
4
vulnerability VCID-5kj1-stm6-8qgv
5
vulnerability VCID-dyak-ybr6-fyhy
6
vulnerability VCID-jst7-263v-1ydx
7
vulnerability VCID-pqwe-3ukm-dkh4
8
vulnerability VCID-qz2s-22e2-ufg9
9
vulnerability VCID-r4pw-m8mz-xbdq
10
vulnerability VCID-sjdx-v2z6-3fcw
11
vulnerability VCID-ub68-nqch-bkdm
12
vulnerability VCID-vwym-qr5h-fue8
13
vulnerability VCID-w35n-bwuy-5kce
14
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.4
34
url pkg:npm/next@15.1.5
purl pkg:npm/next@15.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-54qu-9bx2-9ka8
4
vulnerability VCID-5kj1-stm6-8qgv
5
vulnerability VCID-dyak-ybr6-fyhy
6
vulnerability VCID-jst7-263v-1ydx
7
vulnerability VCID-pqwe-3ukm-dkh4
8
vulnerability VCID-qz2s-22e2-ufg9
9
vulnerability VCID-r4pw-m8mz-xbdq
10
vulnerability VCID-sjdx-v2z6-3fcw
11
vulnerability VCID-ub68-nqch-bkdm
12
vulnerability VCID-vwym-qr5h-fue8
13
vulnerability VCID-w35n-bwuy-5kce
14
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.5
35
url pkg:npm/next@15.1.6
purl pkg:npm/next@15.1.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-54qu-9bx2-9ka8
4
vulnerability VCID-5kj1-stm6-8qgv
5
vulnerability VCID-dyak-ybr6-fyhy
6
vulnerability VCID-jst7-263v-1ydx
7
vulnerability VCID-pqwe-3ukm-dkh4
8
vulnerability VCID-qz2s-22e2-ufg9
9
vulnerability VCID-r4pw-m8mz-xbdq
10
vulnerability VCID-sjdx-v2z6-3fcw
11
vulnerability VCID-ub68-nqch-bkdm
12
vulnerability VCID-w35n-bwuy-5kce
13
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.6
36
url pkg:npm/next@15.1.7
purl pkg:npm/next@15.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qzn-gxkv-wye3
1
vulnerability VCID-2tah-y5sg-hugp
2
vulnerability VCID-3m4d-v2y1-5ua4
3
vulnerability VCID-54qu-9bx2-9ka8
4
vulnerability VCID-5kj1-stm6-8qgv
5
vulnerability VCID-dyak-ybr6-fyhy
6
vulnerability VCID-jst7-263v-1ydx
7
vulnerability VCID-pqwe-3ukm-dkh4
8
vulnerability VCID-qz2s-22e2-ufg9
9
vulnerability VCID-r4pw-m8mz-xbdq
10
vulnerability VCID-sjdx-v2z6-3fcw
11
vulnerability VCID-ub68-nqch-bkdm
12
vulnerability VCID-w35n-bwuy-5kce
13
vulnerability VCID-xv6q-hbf8-b7b1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/next@15.1.7
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-49826.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-49826.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-49826
reference_id
reference_type
scores
0
value 0.00047
scoring_system epss
scoring_elements 0.14414
published_at 2026-04-26T12:55:00Z
1
value 0.00047
scoring_system epss
scoring_elements 0.14441
published_at 2026-04-24T12:55:00Z
2
value 0.00047
scoring_system epss
scoring_elements 0.14412
published_at 2026-04-21T12:55:00Z
3
value 0.00047
scoring_system epss
scoring_elements 0.14212
published_at 2026-04-18T12:55:00Z
4
value 0.00047
scoring_system epss
scoring_elements 0.14213
published_at 2026-04-16T12:55:00Z
5
value 0.00047
scoring_system epss
scoring_elements 0.14323
published_at 2026-04-13T12:55:00Z
6
value 0.00047
scoring_system epss
scoring_elements 0.14378
published_at 2026-04-12T12:55:00Z
7
value 0.00047
scoring_system epss
scoring_elements 0.14415
published_at 2026-04-11T12:55:00Z
8
value 0.00047
scoring_system epss
scoring_elements 0.14465
published_at 2026-04-09T12:55:00Z
9
value 0.00047
scoring_system epss
scoring_elements 0.1441
published_at 2026-04-08T12:55:00Z
10
value 0.00047
scoring_system epss
scoring_elements 0.14327
published_at 2026-04-07T12:55:00Z
11
value 0.00047
scoring_system epss
scoring_elements 0.14449
published_at 2026-04-02T12:55:00Z
12
value 0.00047
scoring_system epss
scoring_elements 0.14518
published_at 2026-04-04T12:55:00Z
13
value 0.00171
scoring_system epss
scoring_elements 0.37979
published_at 2026-04-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-49826
2
reference_url https://github.com/vercel/next.js
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js
3
reference_url https://github.com/vercel/next.js/commit/16bfce64ef2157f2c1dfedcfdb7771bc63103fd2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vercel/next.js/commit/16bfce64ef2157f2c1dfedcfdb7771bc63103fd2
4
reference_url https://github.com/vercel/next.js/commit/a15b974ed707d63ad4da5b74c1441f5b7b120e93
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-07-08T14:33:15Z/
url https://github.com/vercel/next.js/commit/a15b974ed707d63ad4da5b74c1441f5b7b120e93
5
reference_url https://github.com/vercel/next.js/releases/tag/v15.1.8
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-07-08T14:33:15Z/
url https://github.com/vercel/next.js/releases/tag/v15.1.8
6
reference_url https://github.com/vercel/next.js/security/advisories/GHSA-67rr-84xm-4c7r
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-07-08T14:33:15Z/
url https://github.com/vercel/next.js/security/advisories/GHSA-67rr-84xm-4c7r
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-49826
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-49826
8
reference_url https://vercel.com/changelog/cve-2025-49826
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-07-08T14:33:15Z/
url https://vercel.com/changelog/cve-2025-49826
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2376220
reference_id 2376220
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2376220
10
reference_url https://github.com/advisories/GHSA-67rr-84xm-4c7r
reference_id GHSA-67rr-84xm-4c7r
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-67rr-84xm-4c7r
Weaknesses
0
cwe_id 444
name Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
description The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score5.3 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-dyak-ybr6-fyhy