Next.js Content Injection Vulnerability for Image Optimization

Open Redirect in Next.js versions

Denial of Service Vulnerability in next.js

Next.js vulnerable to cache poisoning in React Server Component responses

Open Redirect in Next.js

Next.js vulnerable to cache poisoning via collisions in React Server Component cache-busting

Next.js has cross site scripting (XSS) vulnerability via the 404 or 500 /_error page

Next.js Race Condition to Cache Poisoning

Next.js: null origin can bypass Server Actions CSRF checks

Next.js vulnerable to Denial of Service via connection exhaustion in applications using Cache Components

Directory traversal vulnerability in Next.js

Next.js: null origin can bypass dev HMR websocket CSRF checks

Next.js has a Denial of Service in the Image Optimization API

Next.js: Unbounded postponed resume buffering can lead to DoS

Next.js has cross-site scripting in beforeInteractive scripts with untrusted input

Next.js Cache Poisoning

Next.js: HTTP request smuggling in rewrites

Denial of Service condition in Next.js image optimization

Next.js Affected by Cache Key Confusion for Image Optimization API Routes

Next.js Server-Side Request Forgery in Server Actions