Malicious code in kratos-nextjs-react-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 002a702a76a5afe71ba598cb987b7d8cb8624bd74161c63a0e642fb288083bb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8553 Malicious code in kratos-nextjs-react-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 002a702a76a5afe71ba598cb987b7d8cb8624bd74161c63a0e642fb288083bb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-7670 · Unknown · Sentry-Javascript

Name of the Vulnerable Software and Affected Versions: sentry-javascript versions prior to 7.77.0 Description: The issue is related to insufficient input validation in the sentry-javascript SDK, specifically affecting the Next.js SDK tunnel endpoint. This allows an attacker to send HTTP requests ...

MAL-2023-8440 Malicious code in mux-meet-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a7f1d733a701939944e87966e022ec92915cd460d6293ee215e0e838ce752e77 The OpenSSF Package Analysis project identified 'mux-meet-nextjs' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in mux-meet-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a7f1d733a701939944e87966e022ec92915cd460d6293ee215e0e838ce752e77 The OpenSSF Package Analysis project identified 'mux-meet-nextjs' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-46298

Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN...

ZEIT Next.js Security Vulnerability

ZEIT Next.js is an open source web application framework from ZEIT based on Vue.js, Node.js, Webpack and Babel.js. A security vulnerability exists in versions prior to Next.js 13.4.20-canary.13 that stems from a missing cache control header, which can lead to a denial of service...

Malicious code in wix-fitness-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91475bd31ece187525402450c7faff2552b2105c4f71c48120d1588d38de2e25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-968 Malicious code in wix-fitness-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91475bd31ece187525402450c7faff2552b2105c4f71c48120d1588d38de2e25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Attributes are not properly handled leading to XSS

Description Attribute names and the class attribute values are not properly handled leading to XSS where a user can control either: + A class value + An attribute name. While this may not seem like a important security issue this weakness is not documented. One would assume the behaviour would...

@netlify/plugin-nextjs (>=4.0.0 <=4.7.0), @netlify/plugin-nextjs-experimental (>=0.0.1 <=0.0.6-alpha-tracing.2) potentially affected by CVE-2022-39239 via @netlify/ipx (>=0.0.10 <=0.0.9)

@netlify/ipx NPM version =0.0.10, =4.0.0, =0.0.1, =0.0.6-alpha-tracing.2 Source cves: CVE-2022-39239 Source advisory: OSV:GHSA-9JJV-524M-JM98...

Malicious code in nextjs-accelerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83f7c878f8ea9669769fb79e5abde0f57cbaa8a482dd7cf6f723e57c2eaffbfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4833 Malicious code in nextjs-accelerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83f7c878f8ea9669769fb79e5abde0f57cbaa8a482dd7cf6f723e57c2eaffbfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5397 Malicious code in polaris-example-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d2595e5124f13a673e719f1a7d7cca31d1e323960f1ee483a240227463f01be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in polaris-example-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d2595e5124f13a673e719f1a7d7cca31d1e323960f1ee483a240227463f01be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ZEIT Next.js 安全漏洞

ZEIT Next.js is an open source web application framework from ZEIT based on Vue.js, Node.js, Webpack and Babel.js. A security vulnerability exists in ZEIT Next.js that stems from the product's UI not restricting the display of critical information. An attacker could cause information leakage by...

Open redirect in @auth0/nextjs-auth0

Overview Versions =1.6.2 Will this update impact my users? The fix provided in the patch will not affect your users...

@perimetre/nextjs-auth (>=0.1.0 <=0.2.1), @zagrajmy/app (>=0.0.1 <=0.1.0-alpha.0) potentially affected by CVE-2021-43812 via @auth0/nextjs-auth0 (>=0.11.0 <=0.16.1)

@auth0/nextjs-auth0 NPM version =0.11.0, =0.1.0, =0.0.1, =0.1.0-alpha.0 Source cves: CVE-2021-43812 Source advisory: OSV:GHSA-2MQV-4J3R-VJVP...

GHSA-2MQV-4J3R-VJVP Open redirect in @auth0/nextjs-auth0

Overview Versions =1.6.2 Will this update impact my users? The fix provided in the patch will not affect your users...

ALPINE-CVE-2021-43803

Next.js is a React framework. In versions of Next.js prior to 12.0.5 or 11.1.3, invalid or malformed URLs could lead to a server crash. In order to be affected by this issue, the deployment must use Next.js versions above 11.1.0 and below 12.0.5, Node.js above 15.0.0, and next start or a custom...