638 matches found
@gem-sdk/pages (>=1.9.33, <=1.33.4) potentially affected by CVE-2023-46729 via @sentry/nextjs (>=7.46.0, <=7.57.0)
@sentry/nextjs NPM version =7.46.0, =1.9.33, =1.33.4 Source cves: CVE-2023-46729 Source advisory: OSV:GHSA-2RMR-XW8M-22Q9...
PT-2023-7670
Name of the Vulnerable Software and Affected Versions sentry-javascript versions prior to 7.77.0 Description The issue is related to insufficient input validation in the sentry-javascript SDK, specifically affecting the Next.js SDK tunnel endpoint. This allows an attacker to send HTTP requests to...
MAL-2023-8440 Malicious code in mux-meet-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a7f1d733a701939944e87966e022ec92915cd460d6293ee215e0e838ce752e77 The OpenSSF Package Analysis project identified 'mux-meet-nextjs' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in mux-meet-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a7f1d733a701939944e87966e022ec92915cd460d6293ee215e0e838ce752e77 The OpenSSF Package Analysis project identified 'mux-meet-nextjs' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...
CVE-2023-46298
Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN...
ZEIT Next.js Security Vulnerability
ZEIT Next.js is an open source web application framework from ZEIT based on Vue.js, Node.js, Webpack and Babel.js. A security vulnerability exists in versions prior to Next.js 13.4.20-canary.13 that stems from a missing cache control header, which can lead to a denial of service...
MAL-2023-968 Malicious code in wix-fitness-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91475bd31ece187525402450c7faff2552b2105c4f71c48120d1588d38de2e25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wix-fitness-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91475bd31ece187525402450c7faff2552b2105c4f71c48120d1588d38de2e25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in wix-fitness-nextjs
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in wix-commerce-ticketing-nextjs-template
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Attributes are not properly handled leading to XSS
Description Attribute names and the class attribute values are not properly handled leading to XSS where a user can control either: + A class value + An attribute name. While this may not seem like a important security issue this weakness is not documented. One would assume the behaviour would...
@netlify/plugin-nextjs (>=4.0.0-beta.1, <=4.7.0), @netlify/plugin-nextjs-experimental (>=0.0.1, <=0.0.6) potentially affected by CVE-2022-39239 via @netlify/ipx (>=0.0.5, <=0.0.10)
@netlify/ipx NPM version =0.0.5, =4.0.0-beta.1, =0.0.1, =0.0.6 Source cves: CVE-2022-39239 Source advisory: MEND:CVE-2022-39239...
MAL-2022-4833 Malicious code in nextjs-accelerator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83f7c878f8ea9669769fb79e5abde0f57cbaa8a482dd7cf6f723e57c2eaffbfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in nextjs-accelerator
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in nextjs-accelerator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83f7c878f8ea9669769fb79e5abde0f57cbaa8a482dd7cf6f723e57c2eaffbfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5397 Malicious code in polaris-example-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d2595e5124f13a673e719f1a7d7cca31d1e323960f1ee483a240227463f01be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in polaris-example-nextjs
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in polaris-example-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d2595e5124f13a673e719f1a7d7cca31d1e323960f1ee483a240227463f01be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ZEIT Next.js security vulnerabilities
ZEIT Next.js is an open source web application framework from ZEIT based on Vue.js, Node.js, Webpack and Babel.js. A security vulnerability exists in ZEIT Next.js that stems from the product's UI not restricting the display of critical information. An attacker could cause information leakage by...