PT-2026-104378

Name of the Vulnerable Software and Affected Versions Next.js versions 16.0.0 through 16.3.7 Description The development server in this React framework for building full-stack web applications exposes a Model Context Protocol endpoint that does not reliably restrict cross-site requests. This allo...