Vercel Next.js Vulnerabilities

Vercel Next.js vulnerabilities.

14 October 2024

Potential Denial of Service (DoS) Vulnerability in Image Optimization Feature Affects Next.js Versions
CVE-2024-47831
VercelNext.js7.5HIGH

17 September 2024

Next.js vulnerability: Poisoned cache could expose sensitive data
CVE-2024-46982
VercelNext.js📈👾🟡📰7.5HIGH

10 July 2024

Denial of Service Condition in Next.js Framework
CVE-2024-39693
VercelNext.js7.5HIGH

14 May 2024

Server-Side Request Forgery (SSRF) vulnerability in Next.js Server Actions
CVE-2024-34351
VercelNext.js🥇📈👾🟡📰7.5HIGH
Next.js resolves response queue poisoning vulnerability in affected versions
CVE-2024-34350
VercelNext.js📰7.5HIGH

22 October 2023

Denial of Service Vulnerability in Next.js by Vercel
CVE-2023-46298
VercelNext.js7.5HIGH

31 August 2022

Unexpected server crash in Next.js version 12.2.3
CVE-2022-36046
VercelNext.js5.3MEDIUM

17 February 2022

Improper CSP in Image Optimization API for Next.js
CVE-2022-23646
VercelNext.js5.9MEDIUM

28 January 2022

DOS Vulnerability in next.js
CVE-2022-21721
VercelNext.js5.9MEDIUM

10 December 2021

Unexpected server crash in Next.js
CVE-2021-43803
VercelNext.js7.5HIGH

31 August 2021

XSS in Image Optimization API for Next.js versions between 10.0.0 and 11.1.0
CVE-2021-39178
VercelNext.js7.5HIGH

12 August 2021

Open Redirect in Next.js versions below 11.1.0
CVE-2021-37699
VercelNext.js6.9MEDIUM

8 October 2020

Open Redirect in Next.js
CVE-2020-15242
VercelNext.js4.7MEDIUM

No more vulnerabilities to load.