Skip to content
OpenAdvisories

Package · npm

next

77 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2025-32421 Public exploit

    Next.js Race Condition to Cache Poisoning

    Next.js is a React framework for building full-stack web applications. Versions prior to 14.2.24 and 15.1.6 have a race-condition vulnerability. This issue only affects the Pages Router under certain misconfigurations, causing normal endpoints to serve `pageP…