Vercel Next.js Vulnerabilities

Vercel Next.js vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

29 August 2025

Image Optimization API Vulnerability in Next.js by Vercel
CVE-2025-57752
VercelNext.js6.2MEDIUM
Content Injection Vulnerability in Next.js Framework by Vercel
CVE-2025-55173
VercelNext.js4.3MEDIUM
SSRF Vulnerability in Next.js Framework Affects Vercel Products
CVE-2025-57822
VercelNext.js6.5MEDIUM

3 July 2025

Denial of Service Vulnerability in Next.js by Vercel
CVE-2025-49826
VercelNext.js📈👾📰7.5HIGH
Cache Poisoning Vulnerability in Next.js App Router and Vercel CLI
CVE-2025-49005
VercelNext.js3.7LOW

30 May 2025

Source Code Exposure in Next.js Framework by Vercel
CVE-2025-48068
VercelNext.js2.3LOW

14 May 2025

Race Condition Vulnerability in Next.js Framework Affecting Vercel Deployments
CVE-2025-32421
VercelNext.js📈👾📰3.7LOW

2 April 2025

Data Exposure Vulnerability in Next.js Framework by Vercel
CVE-2025-30218
VercelNext.js1.7LOW

21 March 2025

Authorization Bypass in Next.js Framework by Vercel
CVE-2025-29927
VercelNext.js🥇📈👾🟡EPSS 92%📰9.1CRITICAL

14 October 2024

Potential Denial of Service (DoS) Vulnerability in Image Optimization Feature Affects Next.js Versions
CVE-2024-47831
VercelNext.js7.5HIGH

17 September 2024

Next.js vulnerability: Poisoned cache could expose sensitive data
CVE-2024-46982
VercelNext.js📈👾🟡EPSS 49%📰7.5HIGH

10 July 2024

Denial of Service Condition in Next.js Framework
CVE-2024-39693
VercelNext.js7.5HIGH

14 May 2024

22 October 2023

Denial of Service Vulnerability in Next.js by Vercel
CVE-2023-46298
VercelNext.js7.5HIGH

31 August 2022

Unexpected server crash in Next.js version 12.2.3
CVE-2022-36046
VercelNext.js5.3MEDIUM

17 February 2022

Improper CSP in Image Optimization API for Next.js
CVE-2022-23646
VercelNext.js5.9MEDIUM

28 January 2022

DOS Vulnerability in next.js
CVE-2022-21721
VercelNext.js5.9MEDIUM

10 December 2021

Unexpected server crash in Next.js
CVE-2021-43803
VercelNext.js7.5HIGH

31 August 2021

XSS in Image Optimization API for Next.js versions between 10.0.0 and 11.1.0
CVE-2021-39178
VercelNext.js7.5HIGH

12 August 2021

Open Redirect in Next.js versions below 11.1.0
CVE-2021-37699
VercelNext.js6.9MEDIUM

8 October 2020

Open Redirect in Next.js
CVE-2020-15242
VercelNext.js4.7MEDIUM