CVE-2017-16877

CVE-2017-16877 affects ZEIT/Next.js versions prior to 2.4.1. Multiple connected sources describe a directory traversal flaw in the "/_next" and "/static" namespaces that can allow an attacker to obtain sensitive information from the server. The issue is categorized with high severity in several f...