21 matches found
next: Next.js: Denial of Service via malicious image optimization
A flaw was found in Next.js, a React framework. When self-hosting Next.js with the default image loader and configured to optimize remotely hosted images, a remote attacker could exploit the Image Optimization API. By providing malicious images, the attacker can cause CPU exhaustion, leading to a...
Next.js <1.2.3 - Open Redirect Detection
Next.js contains an open redirect via “next/image” due to improper path parsing. !/usr/bin/env python3 -- coding: utf-8 -- """Next.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Next.js 1.2.3 - Open Redirect...
CVE-2026-44577
Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. An attacker could...
CVE-2026-44573
Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router with i18n configured and middleware/proxy-based authorization can allow unauthorized access to protected page data through locale-less...
CVE-2026-44577: Allocation of Resources Without Limits or Throttling
Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. An attacker could...
Next.js /_next/image optimizer OOM (GHSA-h64f-5h5j-jqjh)
GET /next/image?url=&w=&q= against a large same-origin asset. Pre-16.2.5 the optimizer may decode the full image into memory OOM / long wall. v16.2.5 adds limits. Streams the response in 64 KiB chunks; can stress the target — use only on systems you own. !/usr/bin/env python3 -- coding: utf-8 --...
EUVD-2018-18112
Malware in sbrugna...
CVE-2025-6087
A Server-Side Request Forgery SSRF vulnerability was identified in the @opennextjs/cloudflare package. The vulnerability stems from an unimplemented feature in the Cloudflare adapter for Open Next, which allowed unauthenticated users to proxy arbitrary remote content via the /next/image endpoint...
CVE-2025-6087: Server-Side Request Forgery (SSRF)
A Server-Side Request Forgery SSRF vulnerability was identified in the @opennextjs/cloudflare package. The vulnerability stems from an unimplemented feature in the Cloudflare adapter for Open Next, which allowed unauthenticated users to proxy arbitrary remote content via the /next/image endpoint...
CVE-2024-47830 Plane allows server side request forgery via /_next/image endpoint
Plane is an open-source project management tool. Plane uses the wildcard support to retrieve the image from any hostname as in /web/next.config.js. This may permit an attacker to induce the server side into performing requests to unintended locations. This vulnerability is fixed in 0.23.0...
CVE-2024-37818
Strapi v4.24.4 was discovered to contain a Server-Side Request Forgery SSRF via the component /strapi.io/next/image. This vulnerability allows attackers to scan for open ports or access sensitive information via a crafted GET request. NOTE: The Strapi Development Community argues that this issue ...
CVE-2024-37818
Strapi v4.24.4 was discovered to contain a Server-Side Request Forgery SSRF via the component /strapi.io/next/image. This vulnerability allows attackers to scan for open ports or access sensitive information via a crafted GET request. NOTE: The Strapi Development Community argues that this issue ...
CVE-2024-37818
Strapi v4.24.4 was discovered to contain a Server-Side Request Forgery SSRF via the component /strapi.io/next/image. This vulnerability allows attackers to scan for open ports or access sensitive information via a crafted GET request. NOTE: The Strapi Development Community argues that this issue ...
CVE-2024-37818: Server-Side Request Forgery (SSRF)
Strapi v4.24.4 was discovered to contain a Server-Side Request Forgery SSRF via the component /strapi.io/next/image. This vulnerability allows attackers to scan for open ports or access sensitive information via a crafted GET request. NOTE: The Strapi Development Community argues that this issue ...
CVE-2018-6354
templates/forms/thanks.html in Formspree before 2018-01-23 allows XSS related to the next parameter...
CVE-2018-6354: Improper Neutralization of Input During Web Page Generation
templates/forms/thanks.html in Formspree before 2018-01-23 allows XSS related to the next parameter...
CVE-2018-6184
ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /next request namespace...
CVE-2018-6184
ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /next request namespace...