Insertion of Sensitive Information Into Sent Data

Overview next is a react framework. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in action-handler.ts and action-utils.ts. An attacker can enumerate internal Server Action IDs by sending crafted Next-Action requests or probing client-served...

Next.js 代码问题漏洞

Next.js is a React framework open source by Vercel. Versions of Next.js from 13.4.13 to 15.5.16, as well as versions before 16.2.5, have code vulnerabilities. These vulnerabilities stem from the use of the built-in Node.js server for hosting. When a custom WebSocket upgrade request is made, it ma...

@backstage/backend-dynamic-feature-service (>=0.0.0-nightly-20251218024537, <=0.7.7-next.1), @backstage/backend-test-utils (>=1.10.1-next.0, <=1.10.2-next.1) +14 more potentially affected by CVE-2026-24046 via @backstage/backend-defaults (0.14.0-next.1)

@backstage/backend-defaults NPM version 0.14.0-next.1 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/backend-defaults and may be impacted: - @backstage/backend-dynamic-feature-service =0.0.0-nightly-20251218024537, =1.10.1-next.0,...

PT-1990-1006 · Next · Next

Name of the Vulnerable Software and Affected Versions: NeXT versions 1.0a and 1.0 Description: The issue allows local users to gain privileges through a combination of the npd program and weak directory permissions, specifically when printers are publicly accessible. Recommendations: For NeXT...

PT-1990-1007 · Next · Next

Name of the Vulnerable Software and Affected Versions: NeXT versions 1.0a through 1.0 Description: A local user can gain root privileges due to an issue in the restore0.9 installation script. Recommendations: For NeXT versions 1.0a through 1.0, at the moment, there is no information about a newer...