487 matches found
Malicious code in spark-nextjs-app (npm)
The package spark-nextjs-app was found to contain malicious code...
MAL-2025-46116 Malicious code in spark-nextjs-app (npm)
The package spark-nextjs-app was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2025-55173
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization i...
Linux Distros Unpatched Vulnerability : CVE-2025-49005
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In Next.js App Router from 15.3.0 to before 15.3.3 and Vercel CLI from 41.4.1 to 42.2.0, ...
GHSA-XV57-4MR9-WG8V Next.js Content Injection Vulnerability for Image Optimization
A vulnerability in Next.js Image Optimization has been fixed in v15.4.5 and v14.2.31. The issue allowed attacker-controlled external image sources to trigger file downloads with arbitrary content and filenames under specific configurations. This behavior could be abused for phishing or malicious...
CVE-2025-57822 Next.js Improper Middleware Redirect Handling Leads to SSRF
Next.js is a React framework for building full-stack web applications. Prior to versions 14.2.32 and 15.4.7, when next was used without explicitly passing the request object, it could lead to SSRF in self-hosted applications that incorrectly forwarded user-supplied headers. This vulnerability has...
Exploit for CVE-2025-29927
CVE-2025-29927 - Next.js Middleware 15.2.2 - Authorization Byp...
MAL-2025-41331 Malicious code in temp-nextjs (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1cfe72049bd612f29f827f8066a860bf194d84a26a428ae527df672b1428c39b The OpenSSF Package Analysis project identified 'temp-nextjs' @ 99.0....
Malicious code in temp-nextjs (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1cfe72049bd612f29f827f8066a860bf194d84a26a428ae527df672b1428c39b The OpenSSF Package Analysis project identified 'temp-nextjs' @ 99.0....
Malicious code in style-loader-nextjs-css-loader-gemini (npm)
The package style-loader-nextjs-css-loader-gemini was found to contain malicious code...
Malicious code in nextjs-upgrade-pulsar-bunyan (npm)
The package nextjs-upgrade-pulsar-bunyan was found to contain malicious code...
Malicious code in orderly-js-sdk-nextjs-template (npm)
The package orderly-js-sdk-nextjs-template was found to contain malicious code...
Malicious code in jest-nextjs-wormhole-hadron (npm)
The package jest-nextjs-wormhole-hadron was found to contain malicious code...
MAL-2025-27405 Malicious code in nextjs-maling (npm)
The package nextjs-maling was found to contain malicious code...
MAL-2025-27403 Malicious code in nextjs-fornax-iota-photon (npm)
The package nextjs-fornax-iota-photon was found to contain malicious code...
MAL-2025-27409 Malicious code in nextjs-transform-blazar-procyon (npm)
The package nextjs-transform-blazar-procyon was found to contain malicious code...
MAL-2025-27410 Malicious code in nextjs-upgrade-pulsar-bunyan (npm)
The package nextjs-upgrade-pulsar-bunyan was found to contain malicious code...
Malicious code in io-nextjs-loopback-blitz (npm)
The package io-nextjs-loopback-blitz was found to contain malicious code...