CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4332 matches found

Snyk•added 2026/05/11 3:56 p.m.•35 views

Allocation of Resources Without Limits or Throttling

Overview next is a react framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling involving Partial Prerendering in the Cache Components feature. An attacker can exhaust the connection pool by sending malicious POST requests that cause a...

8.7CVSS7.1AI score0.00764EPSS

SaveExploits1References2

vulnersOsv•added 2026/05/11 3:56 p.m.•7 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44579 via next (>=16.0.0, <=16.2.4)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44579 Source advisory:...

7.5CVSS7.2AI score0.00764EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:56 p.m.•9 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1364 more potentially affected by CVE-2026-44579 via next (>=15.0.0, <=15.5.15)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44579 Source advisory: SNYK:JS-NEXT-16638678...

7.5CVSS7.2AI score0.00764EPSS

SaveExploits1

Github Security Blog•added 2026/05/11 3:56 p.m.•28 views

Next.js vulnerable to Denial of Service via connection exhaustion in applications using Cache Components

Impact Applications using Partial Prerendering through the Cache Components feature can be vulnerable to connection exhaustion through crafted POST requests to a server action. In affected configurations, a malicious request can trigger a request-body handling deadlock that leaves connections ope...

7.5CVSS7.2AI score0.00764EPSS

SaveExploits1References5Affected Software1

vulnersOsv•added 2026/05/11 3:56 p.m.•8 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44577 via next (>=16.0.0, <=16.2.4)

7.5CVSS7.2AI score0.00943EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:55 p.m.•8 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44578 via next (>=16.0.0, <=16.2.4)

8.6CVSS7.6AI score0.01895EPSS

SaveExploits11

vulnersOsv•added 2026/05/11 3:55 p.m.•8 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44578 via next (>=16.0.0, <=16.2.4)

8.6CVSS7.6AI score0.01895EPSS

SaveExploits11

Snyk•added 2026/05/11 3:55 p.m.•22 views

Server-side Request Forgery (SSRF)

Overview next is a react framework. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via crafted WebSocket upgrade requests. An attacker can access internal or external resources by sending specially crafted requests with absolute-url that cause the server to...

8.6CVSS7.8AI score0.01895EPSS

SaveExploits11References2

vulnersOsv•added 2026/05/11 3:54 p.m.•12 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44576 via next (>=16.0.0, <=16.2.4)

5.4CVSS6AI score0.00304EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•14 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 03-gs-ee-6 (0.3.5) +40662 more potentially affected by CVE-2026-44576 via next (>=14.2.0, <=15.5.15)

next NPM version =14.2.0, =0.1.0, =1.0.0, =0.1.0, =1.1.4 - 21guns 1.1.2 - 2bv2 1.4.8 and more Source cves: CVE-2026-44576 Source advisory: OSV:GHSA-WFC6-R584-VFW7...

5.4CVSS6AI score0.00304EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•11 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44576 via next (>=16.0.0, <=16.2.4)

5.4CVSS6AI score0.00304EPSS

SaveExploits0

Snyk•added 2026/05/11 3:54 p.m.•37 views

Interpretation Conflict

Overview next is a react framework. Affected versions of this package are vulnerable to Interpretation Conflict via improper handling of shared cache entries for React Server Component responses. An attacker can cause unintended component payloads to be served to other users by manipulating share...

6.3CVSS5.9AI score0.00304EPSS

SaveExploits0References2

Github Security Blog•added 2026/05/11 3:54 p.m.•30 views

Next.js vulnerable to cache poisoning in React Server Component responses

Impact Applications using React Server Components can be vulnerable to cache poisoning when shared caches do not correctly partition response variants. Under affected conditions, an attacker can cause an RSC response to be served from the original URL and poison shared cache entries so later...

5.4CVSS6.1AI score0.00304EPSS

SaveExploits0References5Affected Software1

vulnersOsv•added 2026/05/11 3:54 p.m.•11 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +844 more potentially affected by CVE-2026-44575 +1 more via next (>=15.2.0, <=15.5.15)

next NPM version =15.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44575, CVE-2026-45109 Source advisory: SNYK:JS-NEXT-16638685...

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•10 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44575 via next (>=16.0.0, <=16.2.4)

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•12 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44575 +1 more via next (>=16.0.0, <=16.2.4)

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•9 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +844 more potentially affected by CVE-2026-44575 via next (>=15.2.0, <=15.5.15)

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0

Snyk•added 2026/05/11 3:54 p.m.•31 views

Authentication Bypass Using an Alternate Path or Channel

Overview next is a react framework. Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel in the handling of segment-prefetch routes. An attacker can gain unauthorized access to protected content by crafting .rsc and segment-prefetch URLs tha...

8.7CVSS7.1AI score0.00761EPSS

SaveExploits0References2

vulnersOsv•added 2026/05/11 3:54 p.m.•9 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44574 via next (>=16.0.0, <=16.2.4)

8.1CVSS7.4AI score0.00667EPSS

SaveExploits2

vulnersOsv•added 2026/05/11 3:54 p.m.•9 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +350 more potentially affected by CVE-2026-44574 via next (>=15.4.0-canary.17, <=15.5.15)

next NPM version =15.4.0-canary.17, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44574 Source advisory: SNYK:JS-NEXT-16638679...

8.1CVSS7.4AI score0.00667EPSS

SaveExploits2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by