Skip to content
OpenAdvisories

Package · npm

next-video

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-54150

    next-video: Unauthenticated arbitrary file read via /api/video request handler

    next-video is a library for adding video to Next.js applications. Prior to 2.8.1, the GET endpoint exported by next-video/request-handler and commonly mounted at /api/video accepts an unauthenticated url query parameter, while src/utils/utils.ts isRemote() tr…

    muxinc next-video next-video npm