Skip to content
OpenAdvisories

Product · Progress Software

@progress/sitefinity-nextjs-sdk

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-92931

    CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK

    CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive infor…

    Progress Software @progress/sitefinity-nextjs-sdk