ROOT-APP-NPM-CVE-2024-46982 CVE-2024-46982 in next - Patched by Root

Root has patched CVE-2024-46982 in the next package for Root:npm. Multiple fixed versions available...

CVE-2024-46982-NUCLEI

这是一个使用 create-next-app 引导创建的 Next.js 项目。 快速开始 首先，运行开发服务器： root@kitploit: npm run dev or yarn dev or pnpm dev or bun run dev 在浏览器中打开 http://localhost:3000 即可查看结果。 你可以通过修改 pages/index.js 开始编辑页面。当你编辑文件时，页面会自动更新。 可以通过 http://localhost:3000/api/hello 访问 API 路由。该端点可在 pages/api/hello.js 中编辑。 pages/api...

Exploit for Authorization Bypass Through User-Controlled Key in Vercel Next.Js

Next.js RCE Scanner Fast vulnerability scanner for Next.js Se...

Security Bulletin: IBM QRadar Pre-Validation App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that might be identified and exploited with automated tools. IBM has addressed the vulnerabilities. This product is only used by IBM QRadar SIEM app developers and external business partners and is not relevant for users...

CVE-2024-46982 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu...

1ocalendar (1.0.0), @alpaca-headless/alpaca-headless-nextjs (>=1.0.13, <=1.0.27) +152 more potentially affected by CVE-2024-46982 via next (>=13.5.1, <=13.5.6)

next NPM version =13.5.1, =1.0.13, =1.0.7, =1.0.0, =1.0.5, =0.1.0, =24.4.0, =0.2.7, =5.4.2, =1.0.0, =0.0.1, =0.0.14 and more Source cves: CVE-2024-46982 Source advisory: OSV:GHSA-GP8F-8M3G-QVJ9...

CVE-2024-46982 Cache Poisoning in next.js

Next.js is a React framework for building full-stack web applications. By sending a crafted HTTP request, it is possible to poison the cache of a non-dynamic server-side rendered route in the pages router this does not affect the app router. When this crafted request is sent it could coerce Next....