Поиск уязвимостей

Next.js Cache Poisoning

Next.js: HTTP request smuggling in rewrites

Denial of Service condition in Next.js image optimization

Next.js Affected by Cache Key Confusion for Image Optimization API Routes

Next.js Server-Side Request Forgery in Server Actions

Directory Traversal in Next.js

Next.js Denial of Service (DoS) condition

Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0

Next.js vulnerable to cross-site scripting in App Router applications using CSP nonces

Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass

Authorization Bypass in Next.js Middleware

Next.js has Server-Side Request Forgery in Image Optimization

Next.js missing cache-control header may lead to CDN caching empty reply

Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades

XSS in Image Optimization API for Next.js

Next.js self-hosted applications vulnerable to DoS via Image Optimizer remotePatterns configuration

Next.js: Unauthenticated disclosure of internal Server Function endpoints

Next.js: Server-Side Request Forgery in Server Actions on custom servers

Next.js Allows a Denial of Service (DoS) with Server Actions

Next.js authorization bypass vulnerability