ROOT-APP-NPM-CVE-2024-46982 CVE-2024-46982 in next - Patched by Root

🗓️ 11 Sep 2026 17:53:57Reported by GoogleType

osv🔗 osv.dev👁 8 Views

CVE-2024-46982 in the next npm package, patched by Root with multiple fixed versions.

Reporter	Title	Published	Views	Family All 31
GithubExploit	Exploit for CVE-2024-46982	23 Jan 202503:38	–	githubexploit
GithubExploit	Exploit for Race Condition in Vercel Next.Js	11 Oct 202507:24	–	githubexploit
GithubExploit	Exploit for Authorization Bypass Through User-Controlled Key in Vercel Next.Js	6 Dec 202507:11	–	githubexploit
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	8 Nov 202408:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Pre-Validation App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	20 Nov 202415:23	–	ibm
BDU FSTEC	The vulnerability of the Next.js software platform for creating web applications lies in its ability to bypass authentication by using a user-controlled key. This allows attackers to disclose sensitive information that should be protected.	4 Oct 202400:00	–	bdu_fstec
Chainguard	CVE-2024-46982 vulnerabilities	17 Sep 202422:15	–	cgr
Circl	CVE-2024-46982	18 Sep 202400:49	–	circl
CNNVD	Next.js 安全漏洞	17 Sep 202400:00	–	cnnvd
CVE	CVE-2024-46982	17 Sep 202421:55	–	cve

11 Sep 2026 18:15Current

CVSS 3.17.5

EPSS0.5918

SSVC

next npm package CVE-2024-46982 patched library