Поиск уязвимостей

Next.js Vulnerable to HTTP Request Smuggling

Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Next.js: Cache confusion of response bodies for requests with bodies

Next.JS vulnerability can lead to DoS via cache poisoning

Next.js has Unbounded Memory Consumption via PPR Resume Endpoint

Next.js has cache poisoning of SSG and ISR pages in self-hosted applications

Next.js: Unbounded Server Action payload in Edge runtime

Next.js has a Middleware / Proxy bypass through dynamic route parameter injection

Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Next.js Improper Middleware Redirect Handling Leads to SSRF

Next.js: Unbounded next/image disk cache growth can exhaust storage

Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages

Information exposure in Next.js dev server due to lack of origin verification

Next.js's Middleware / Proxy redirects can be cache-poisoned

Next.js Directory Traversal Vulnerability

Next.js has information disclosure in development server's Model Context Protocol endpoint

Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n

Permissive Cross-domain Security Policy with Untrusted Domains vulnerability in Drupal Next.Js allows Cross-Site Scripting (XSS).This issue affects Next.Js: from 0.0.0 before 1.6.4, from 2.0.0 before 2.0.1.

Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes