Lucene search

K
osvGoogleOSV:GHSA-FQ77-7P7R-83RJ
HistoryMar 30, 2020 - 8:40 p.m.

Directory Traversal in Next.js

2020-03-3020:40:50
Google
osv.dev
15

0.002 Low

EPSS

Percentile

59.7%

Impact

  • Not affected: Deployments on ZEIT Now v2 (https://zeit.co) are not affected
  • Not affected: Deployments using the serverless target
  • Not affected: Deployments using next export
  • Affected: Users of Next.js below 9.3.2

We recommend everyone to upgrade regardless of whether you can reproduce the issue or not.

Patches

https://github.com/zeit/next.js/releases/tag/v9.3.2

References

https://github.com/zeit/next.js/releases/tag/v9.3.2

CPENameOperatorVersion
nextlt9.3.2

0.002 Low

EPSS

Percentile

59.7%