483 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-49005
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In Next.js App Router from 15.3.0 to before 15.3.3 and Vercel CLI from 41.4.1 to 42.2.0, ...
GHSA-XV57-4MR9-WG8V Next.js Content Injection Vulnerability for Image Optimization
A vulnerability in Next.js Image Optimization has been fixed in v15.4.5 and v14.2.31. The issue allowed attacker-controlled external image sources to trigger file downloads with arbitrary content and filenames under specific configurations. This behavior could be abused for phishing or malicious...
CVE-2025-57822 Next.js Improper Middleware Redirect Handling Leads to SSRF
Next.js is a React framework for building full-stack web applications. Prior to versions 14.2.32 and 15.4.7, when next was used without explicitly passing the request object, it could lead to SSRF in self-hosted applications that incorrectly forwarded user-supplied headers. This vulnerability has...
Exploit for CVE-2025-29927
CVE-2025-29927 - Next.js Middleware 15.2.2 - Authorization Byp...
Malicious code in temp-nextjs (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1cfe72049bd612f29f827f8066a860bf194d84a26a428ae527df672b1428c39b The OpenSSF Package Analysis project identified 'temp-nextjs' @ 99.0....
MAL-2025-41331 Malicious code in temp-nextjs (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1cfe72049bd612f29f827f8066a860bf194d84a26a428ae527df672b1428c39b The OpenSSF Package Analysis project identified 'temp-nextjs' @ 99.0....
Malicious code in nextjs-upgrade-pulsar-bunyan (npm)
The package nextjs-upgrade-pulsar-bunyan was found to contain malicious code...
Malicious code in nextjs-nconf-centauri-middleware (npm)
The package nextjs-nconf-centauri-middleware was found to contain malicious code...
Malicious code in nextjs-surya (npm)
The package nextjs-surya was found to contain malicious code...
Malicious code in nextjs-thuban-terraforming-stop (npm)
The package nextjs-thuban-terraforming-stop was found to contain malicious code...
Malicious code in nextjs-fornax-iota-photon (npm)
The package nextjs-fornax-iota-photon was found to contain malicious code...
Malicious code in cluster-nextjs-html-webpack-plugin-scripts (npm)
The package cluster-nextjs-html-webpack-plugin-scripts was found to contain malicious code...
Malicious code in io-nextjs-loopback-blitz (npm)
The package io-nextjs-loopback-blitz was found to contain malicious code...
Malicious code in style-loader-nextjs-css-loader-gemini (npm)
The package style-loader-nextjs-css-loader-gemini was found to contain malicious code...
Malicious code in webdriver-manager-plutology-nextjs-dynamo (npm)
The package webdriver-manager-plutology-nextjs-dynamo was found to contain malicious code...
Malicious code in nextjs-maling (npm)
The package nextjs-maling was found to contain malicious code...
Malicious code in nextjs-transform-blazar-procyon (npm)
The package nextjs-transform-blazar-procyon was found to contain malicious code...
Malicious code in axios-antimatter-nextjs-leda (npm)
The package axios-antimatter-nextjs-leda was found to contain malicious code...