Next.js Content Injection Vulnerability for Image Optimization

Open Redirect in Next.js versions

Denial of Service Vulnerability in next.js

Next.js vulnerable to cache poisoning in React Server Component responses

Open Redirect in Next.js

Next.js vulnerable to cache poisoning via collisions in React Server Component cache-busting

Next.js has cross site scripting (XSS) vulnerability via the 404 or 500 /_error page

Next.js Race Condition to Cache Poisoning

Next.js: Denial of Service in the Image Optimization API using SVGs

Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Next.js: null origin can bypass Server Actions CSRF checks

Next.js vulnerable to Denial of Service via connection exhaustion in applications using Cache Components

Next.js: Denial of Service in App Router using Server Actions

Directory traversal vulnerability in Next.js

Next.js: null origin can bypass dev HMR websocket CSRF checks

Next.js has a Denial of Service in the Image Optimization API

Next.js: Unbounded postponed resume buffering can lead to DoS

Next.js has cross-site scripting in beforeInteractive scripts with untrusted input

Next.js Cache Poisoning

Next.js: HTTP request smuggling in rewrites