Lucene search
+L

3 matches found

OSV
OSV
added 2 days ago4 views

GHSA-6GPP-XCG3-4W24 Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Impact Crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. Workarounds If you cannot upgrade immediately, enforce authorization in the page's server-side data path instead...

8.3CVSS5.3AI score
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2 days ago6 views

Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Impact Crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. Workarounds If you cannot upgrade immediately, enforce authorization in the page's server-side data path instead...

5.3AI score
SaveExploits0References5Affected Software1
Patchstack
Patchstack
added 2 days ago8 views

NPM: Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

NPM: Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale vulnerability discovered by ? in WordPress Npm next versions = 16.0.0, 16.2.11...

5.3AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder