1825 matches found
CVE-2025-59471
A denial of service vulnerability exists in self-hosted Next.js applications that have remotePatterns configured for the Image Optimizer. The image optimization endpoint /next/image loads external images entirely into memory without enforcing a maximum size limit, allowing an attacker to cause...
CVE-2025-59472
A denial of service vulnerability exists in Next.js versions with Partial Prerendering PPR enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the "Next-Resume: 1" header and processes attacker-controlled postponed state data. Two closely relat...
CVE-2025-59471
CVE-2025-59471 describes a denial-of-service in self-hosted Next.js apps that have a remotePatterns configuration for the Image Optimizer. The vulnerability arises because the image optimization endpoint /_next/image loads external images fully into memory and does not enforce a maximum size, ena...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 React2Shell Vulnerability Target Vulnerab...
CVE-2026-23864: React and Next.js Denial of Service via Memory Exhaustion
...
Next.js security vulnerabilities
Next.js is a React framework open source by Vercel. Next.js has a security vulnerability, which stems from the unlimited request body buffering and decompression allowed in the PPR recovery endpoint. This vulnerability could lead to memory exhaustion and denial of service...
Next.js security vulnerabilities
Next.js is a React framework open source by Vercel. There is a security vulnerability in Next.js, which stems from the image optimization endpoint not enforcing a maximum size limit. This could lead to memory exhaustion and denial of service...
PT-2026-4816
Name of the Vulnerable Software and Affected Versions Next.js versions prior to 15.5.10 Next.js versions prior to 16.1.5 Description A denial of service issue exists in self-hosted Next.js applications utilizing the Image Optimizer with configured remotePatterns. The image optimization endpoint /...
PT-2026-4817
Name of the Vulnerable Software and Affected Versions Next.js versions with experimental.ppr: true or cacheComponents: true configured along with the NEXT PRIVATE MINIMAL MODE=1 environment variable Description A denial of service issue exists in Next.js when Partial Prerendering PPR is enabled i...
CVE-2025-59471: Uncontrolled Resource Consumption
A denial of service vulnerability exists in self-hosted Next.js applications that have remotePatterns configured for the Image Optimizer. The image optimization endpoint /next/image loads external images entirely into memory without enforcing a maximum size limit, allowing an attacker to cause...
CVE-2025-59472: Uncontrolled Resource Consumption
A denial of service vulnerability exists in Next.js versions with Partial Prerendering PPR enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the Next-Resume: 1 header and processes attacker-controlled postponed state data. Two closely related...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell - Preuve de Concept CVE-2025-55182 Ce projet...
RCE-Exploit-Tools
RCE Exploit Research Tools Project Overview This repository cont...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell Go Version React2Shell is a high-performance vu...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Vulnerability Detection and Exploitation Tool...
CVE-2022-23646
Next.js is a React framework. Starting with version 10.0.0 and prior to version 12.1.0, Next.js is vulnerable to User Interface UI Misrepresentation of Critical Information. In order to be affected, the next.config.js file must have an images.domains array assigned and the image host assigned in...
CVE-2024-39693
Next.js is a React framework. A Denial of Service DoS condition was identified in Next.js. Exploitation of the bug can trigger a crash, affecting the availability of the server. his vulnerability was resolved in Next.js 13.5 and later...
Security Bulletin: Multiple Vulnerabilities in IBM Event Processing
Summary IBM Event Processing was affected by multiple vulnerabilities. These are affecting the operator and frontend components. Vulnerability Details CVEID:CVE-2025-57752 DESCRIPTION: Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0....