Skip to content
OpenAdvisories

Vendor

vercel

76 known vulnerabilities.

Products

next.js 57 ai 3 turborepo 3 next 3 pkg 1 hyper 1 flags 1 @ai-sdk/harness-codex 1 @ai-sdk/harness-opencode 1 ms 1 vercel 1 Nuxt Devtools 1 deepsec 1 satori 1 AI SDK 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.0
    CVE-2026-75604 Public exploit

    Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

    Next.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 and 16.3.3, Next.js applications using Pages Router or App Router without Cache Components on Windows-hosted servers do not consistently escape backslashes in rou…

    vercel next.js next npm
  • Critical 9.1
    CVE-2025-29927 Public exploit Scanner template EPSS 99%

    Authorization Bypass in Next.js Middleware

    Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check…

    vercel next.js jitsucom-jitsu-console next Wolfi npm