Vulnerabilities

TI-2026-79302 CVE-2026-94482 · GHSA-p3m5-59mp-jv5r

Denial of service in Next.js App Router using Server Actions

MEDIUM 42

Next.js is a React framework for building full-stack web applications.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00386 Published 2026-10-22 Partial fix · 15.5.28, 16.4.1 CWE-770

TI-2026-71278 CVE-2026-109375 · GHSA-cchp-25pr-r776

Arbitrary file write via symlink in Vercel deepsec

LOW 22

Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the sandbox by planting links in result tarballs.

CVSS 4.0MEDIUM 4.9 Network No auth User interaction EPSS 0.00322 Published 2026-10-12 Fixed in 1.1.17 CWE-59

TI-2026-65938 CVE-2026-94484 · GHSA-mcj8-r9mp-w47p

Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content…

LOW 28

Next.js is a React framework for building full-stack web applications.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00244 Published 2026-10-02 Partial fix · 15.5.27, 16.3.8 CWE-524

TI-2026-65939 CVE-2026-94485 · GHSA-f87g-xv8r-7p7x

Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass

LOW 27

Next.js is a React framework for building full-stack web applications.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00173 Published 2026-10-02 Partial fix · 16.3.8 CWE-346

TI-2026-65937 CVE-2026-94483 · GHSA-cjq9-62q9-8jv4

Next.js: Server-Side Request Forgery in Image Optimization

LOW 36

Next.js is a React framework for building full-stack web applications.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.0033 Published 2026-10-02 Partial fix · 16.3.8 CWE-918

TI-2026-65942 CVE-2026-94543 · GHSA-4jqv-mc3x-m676

Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

LOW 35

Next.js is a React framework for building full-stack web applications.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00506 Published 2026-10-02 Partial fix · 15.5.27, 16.3.8 CWE-524

TI-2026-65943 CVE-2026-94544 · GHSA-3w37-wq28-93x7

Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages

LOW 27

Next.js is a React framework for building full-stack web applications.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00179 Published 2026-10-02 Partial fix · 16.3.8 CWE-524

TI-2026-65940 CVE-2026-94486 · GHSA-39w2-rjm5-chcv

Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint

LOW 11

Next.js is a React framework for building full-stack web applications.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00114 Published 2026-10-02 Partial fix · 16.3.8 CWE-346

TI-2026-65559 CVE-2026-103004 · GHSA-h694-7cp9-m8p3

next.js cache leak on warm `use cache` handlers accessing root param

LOW 34

Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with different root params.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0025 Published 2026-10-01 Partial fix · 16.3.8 CWE-524

TI-2026-63464 CVE-2026-94545 · GHSA-wx4j-mvgx-mqwp

Satori-generated SVG has improper escaping

LOW 26

Satori is a library to convert HTML and CSS to SVG.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.01082 Published 2026-09-30 Fixed in 0.33.5, 16.3.6 CWE-116

TI-2026-52910 CVE-2026-75604 · GHSA-p293-qw3h-jr36

Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

MEDIUM 45

Next.js is a React framework for building full-stack web applications.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.02105 Published 2026-09-01 Fixed in 15.5.24, 16.3.3 CWE-22

TI-2026-46210 CVE-2026-64649 · GHSA-89xv-2m56-2m9x

Next.js: Server-Side Request Forgery in Server Actions on Custom Servers

LOW 36

Next.js is a React framework for building full-stack web applications.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00459 Published 2026-07-27 Partial fix · 15.5.21, 16.2.11 CWE-918

TI-2026-46209 CVE-2026-64648 · GHSA-68g3-v927-f742

Next.js: Response Body Cache Confusion for Requests Containing Bodies

LOW 27

Next.js is a React framework for building full-stack web applications.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00338 Published 2026-07-27 Partial fix · 15.5.21, 16.2.11 CWE-524

TI-2026-46208 CVE-2026-64647 · GHSA-4633-3j49-mh5q

Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies

LOW 28

Next.js is a React framework for building full-stack web applications.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00317 Published 2026-07-27 Partial fix · 15.5.21, 16.2.11 CWE-116

TI-2026-46207 CVE-2026-64646 · GHSA-4c39-4ccg-62r3

Next.js: Unbounded Server Action payload in Edge runtime

LOW 29

Next.js is a React framework for building full-stack web applications.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00524 Published 2026-07-27 Partial fix · 16.2.11, 15.5.21 CWE-770

TI-2026-46205 CVE-2026-64644 · GHSA-q8wf-6r8g-63ch

Next.js: Denial of Service in the Image Optimization API using SVGs

LOW 29

Next.js is a React framework for building full-stack web applications.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00666 Published 2026-07-27 Fixed in 15.5.21, 16.2.11 CWE-407

TI-2026-46204 CVE-2026-64643 · GHSA-955p-x3mx-jcvp

Next.js: Unauthenticated Disclosure of Internal Server Function endpoints

LOW 35

Next.js is a React framework for building full-stack web applications.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0051 Published 2026-07-27 Partial fix · 15.5.21, 16.2.11 CWE-201

TI-2026-46203 CVE-2026-64642 · GHSA-6gpp-xcg3-4w24

Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

LOW 37

Next.js is a React framework for building full-stack web applications.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00635 Published 2026-07-27 Partial fix · 16.2.11 CWE-285

TI-2026-46202 CVE-2026-64641 · GHSA-m99w-x7hq-7vfj

Next.js: Denial of Service in App Router using Server Actions

MEDIUM 43

Next.js is a React framework for building full-stack web applications.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00856 Published 2026-07-27 Partial fix · 15.5.21, 16.2.11 CWE-834

TI-2026-46206 CVE-2026-64645 · GHSA-p9j2-gv94-2wf4

Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

LOW 36

Next.js is a React framework for building full-stack web applications.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00414 Published 2026-07-27 Partial fix · 16.2.11, 15.5.21 CWE-601

TI-2026-46211 CVE-2026-64650

AI SDK Codex Harness Tool Relay Authorization Bypass

LOW 27

The `@ai-sdk/harness-opencode` tool is an HarnessV1 adapter backed by @openai/codex-sdk, which drives the codex command line interface.

CVSS 4.0MEDIUM 6.3 Local No auth No interaction EPSS 0.00174 Published 2026-07-20 Fixed in 1.0.29 CWE-863

TI-2026-46212 CVE-2026-64651

AI SDK OpenCode Harness Tool Relay Authorization Bypass

LOW 27

The `@ai-sdk/harness-opencode` tool connects HarnessAgent to OpenCode through a sandboxed bridge.

CVSS 4.0MEDIUM 6.3 Local No auth No interaction EPSS 0.00174 Published 2026-07-20 Fixed in 1.0.29 CWE-863

TI-2026-07707 CVE-2026-8769 · GHSA-866g-f22w-33x8

vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption

MEDIUM 57

A vulnerability was determined in vercel ai up to 3.0.97.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00561 Published 2026-05-17 Fixed in 3.0.28, 4.0.33 +1 CWE-400

TI-2026-07706 CVE-2026-8768 · GHSA-8rqj-9gxc-63cr

vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery

HIGH 70

A vulnerability was found in vercel ai up to 3.0.97.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00458 Published 2026-05-17 No fix listed CWE-918

TI-2026-07705 CVE-2026-8767 · GHSA-9pj2-3x6v-c3pp

vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection

MEDIUM 45

A vulnerability has been found in vercel ai up to 3.0.97.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.06966 Published 2026-05-17 No fix listed CWE-77

Vulnerabilities

Filters