Directory Traversal in Next.js

Next.js Denial of Service (DoS) condition

Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0

Next.js vulnerable to cross-site scripting in App Router applications using CSP nonces

Authorization Bypass in Next.js Middleware

Next.js missing cache-control header may lead to CDN caching empty reply

Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades

XSS in Image Optimization API for Next.js

Next.js self-hosted applications vulnerable to DoS via Image Optimizer remotePatterns configuration

Next.js Allows a Denial of Service (DoS) with Server Actions

Next.js authorization bypass vulnerability

Next.js Vulnerable to HTTP Request Smuggling

Next.JS vulnerability can lead to DoS via cache poisoning

Next.js has Unbounded Memory Consumption via PPR Resume Endpoint

Next.js has a Middleware / Proxy bypass through dynamic route parameter injection

Next.js Improper Middleware Redirect Handling Leads to SSRF

Next.js: Unbounded next/image disk cache growth can exhaust storage

Information exposure in Next.js dev server due to lack of origin verification

Next.js's Middleware / Proxy redirects can be cache-poisoned

Next.js Directory Traversal Vulnerability