Denial of Service condition in Next.js image optimization

Next.js Affected by Cache Key Confusion for Image Optimization API Routes

Next.js Server-Side Request Forgery in Server Actions

Directory Traversal in Next.js

Next.js Denial of Service (DoS) condition

Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0

Next.js vulnerable to cross-site scripting in App Router applications using CSP nonces

Authorization Bypass in Next.js Middleware

Next.js missing cache-control header may lead to CDN caching empty reply

Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades

XSS in Image Optimization API for Next.js

Next.js self-hosted applications vulnerable to DoS via Image Optimizer remotePatterns configuration

Next.js: Unauthenticated disclosure of internal Server Function endpoints

Next.js: Server-Side Request Forgery in Server Actions on custom servers

Next.js Allows a Denial of Service (DoS) with Server Actions

Next.js authorization bypass vulnerability

Next.js Vulnerable to HTTP Request Smuggling

Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Next.js: Cache confusion of response bodies for requests with bodies

Next.JS vulnerability can lead to DoS via cache poisoning