Lucene search
K

6 matches found

Cvelist
Cvelist
added 2022/08/31 6:55 p.m.8 views

CVE-2022-36046 Unexpected server crash in Next.js version 12.2.3

Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict unhandledRejection exiting AND using next start or a custom server...

5.3CVSS5.5AI score0.00436EPSS
Exploits0References2
OSV
OSV
added 2022/08/30 8:38 p.m.0 views

GHSA-WFF4-FPWG-QQV3 Unexpected server crash in Next.js

Impact When specific requests are made to the Next.js server it can cause an unhandledRejection in the server which can crash the process to exit in specific Node.js versions with strict unhandledRejection handling. - Affected: All of the following must be true to be affected by this CVE - Node.j...

5.3CVSS7.1AI score0.00436EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/08/30 12:0 a.m.2 views

PT-2022-23140 · Next.Js +1 · Next.Js +1

Name of the Vulnerable Software and Affected Versions: Next.js version 12.2.3 Description: The issue affects Next.js when used with Node.js version above v15.0.0 and strict unhandledRejection exiting, and when using next start or a custom server. Specific requests to the Next.js server can cause ...

5.3CVSS6.1AI score0.00436EPSS
Exploits0References9
Github Security Blog
Github Security Blog
added 2022/01/28 11:9 p.m.32 views

Denial of Service Vulnerability in next.js

Impact Vulnerable code could allow a bad actor to trigger a denial of service attack for anyone running a Next.js app at version = 12.0.0, and using i18n functionality. - Affected: All of the following must be true to be affected by this CVE - Next.js versions above v12.0.0 - Using next start or ...

7.5CVSS3.4AI score0.00931EPSS
Exploits0References5Affected Software1
Prion
Prion
added 2022/01/28 10:15 p.m.16 views

Code injection

Next.js is a React framework. Starting with version 12.0.0 and prior to version 12.0.9, vulnerable code could allow a bad actor to trigger a denial of service attack for anyone using i18n functionality. In order to be affected by this CVE, one must use next start or a custom server and the built-...

4.3CVSS7.6AI score0.00931EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2022/01/28 10:0 p.m.18 views

CVE-2022-21721 DOS Vulnerability in next.js

Next.js is a React framework. Starting with version 12.0.0 and prior to version 12.0.9, vulnerable code could allow a bad actor to trigger a denial of service attack for anyone using i18n functionality. In order to be affected by this CVE, one must use next start or a custom server and the built-...

5.9CVSS7.7AI score0.00931EPSS
Exploits0References3
Rows per page
Query Builder