Next.js — открытый JavaScript фреймворк, созданный поверх React.js для создания веб-приложений

Next.js has a Middleware / Proxy bypass through dynamic route parameter injection

Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n

Next.js's Middleware / Proxy redirects can be cache-poisoned

Next.js has a Denial of Service in the Image Optimization API

Next.js vulnerable to cache poisoning via collisions in React Server Component cache-busting

Next.js vulnerable to Denial of Service via connection exhaustion in applications using Cache Components

Next.js vulnerable to cross-site scripting in App Router applications using CSP nonces

Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades

Next.js has cross-site scripting in beforeInteractive scripts with untrusted input