Known vulnerabilities in Next.js - page 4

Vendor: vercel
Software: Next.js
Software CPE: cpe:2.3:a:vercel:nextjs:*:*:*:*:*:*:*:*
Total vulnerabilities: 64
Public exploits: 8
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Next.js Next.js is affected by 64 known vulnerabilities: 1 critical, 6 high, 44 medium, 13 low Critical High Medium Low

Vulnerabilities (64)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU15347 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-18282
CWE-79 Low
No
No
7.0.2 14.10.2018 SB2018101403
#VU37594 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-6184
CWE-22 Medium
No
No
- 24.01.2018 SB2018012426
#VU31397 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-16877
CWE-22 Medium
No
No
2.4.1 17.11.2017 SB2017111707
#VU6872 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
- 02.06.2017 SB2017060209


Showing elements 61 - 80 out of 64