Known vulnerabilities in Next.js - page 4

Vendor: vercel
Software: Next.js
Software CPE: cpe:2.3:a:vercel:nextjs:*:*:*:*:*:*:*:*
Total vulnerabilities: 67
Public exploits: 9
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Next.js Next.js is affected by 67 known vulnerabilities: 1 critical, 9 high, 44 medium, 13 low Critical High Medium Low

Vulnerabilities (67)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80774 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-37699
CWE-601 Low
No
No
11.1.0 14.09.2023 SB2023091411
SB2021081127
#VU47483 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-15242
CWE-601 Low
No
No
9.5.4 08.10.2020 SB2020100904
#VU26476 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-5284
CWE-22 Medium
No
No
9.3.2 31.03.2020 SB2020033113
#VU15347 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-18282
CWE-79 Low
No
No
7.0.2 14.10.2018 SB2018101403
#VU37594 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-6184
CWE-22 Medium
No
No
- 24.01.2018 SB2018012426
#VU31397 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-16877
CWE-22 Medium
No
No
2.4.1 17.11.2017 SB2017111707
#VU6872 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
- 02.06.2017 SB2017060209


Showing elements 61 - 80 out of 67