vercel

9 results · Clear filters · Feed

• Low 2.3
  CVE-2026-94486

  Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint

  Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a devel…

  vercel next.js next npm
  Oct 2, 2026
• Low 3.7
  CVE-2026-44582

  Next.js: Cache poisoning via collisions in React Server Component cache-busting

  Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 and 16.2.5, React Server Component responses can be vulnerable to cache poisoning in deployments that rely on shared caches with insufficient response partiti…

  vercel next.js next npm
  May 13, 2026
• Low 3.7
  CVE-2026-44572

  Next.js: Middleware / Proxy redirects can be cache-poisoned

  Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, an external client could send a x-nextjs-data header on a normal request to a path handled by middleware that returns a redirect. When that happen…

  vercel next.js next npm
  May 13, 2026
• Low 2.3
  CVE-2026-27977

  Next.js: null origin can bypass dev HMR websocket CSRF checks

  Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, in `next dev`, cross-site protection for internal websocket endpoints could treat `Origin: null` as a bypass case even if `allowedDe…

  vercel next.js next npm
  Mar 17, 2026
• Low 3.7
  CVE-2025-48985

  Vercel’s AI SDK's filetype whitelists can be bypassed when uploading files

  A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade. More details: https://vercel.com/cha…

  vercel AI SDK ai npm
  Nov 7, 2025
• Low 3.7
  CVE-2025-49005

  Next.js cache poisoning due to omission of Vary header

  Next.js is a React framework for building full-stack web applications. In Next.js App Router from 15.3.0 to before 15.3.3 and Vercel CLI from 41.4.1 to 42.2.0, a cache poisoning vulnerability was found. The issue allowed page requests for HTML content to retu…

  vercel next.js next npm
  Jul 3, 2025
• Low 2.3
  CVE-2025-48068

  Information exposure in Next.js dev server due to lack of origin verification

  Next.js is a React framework for building full-stack web applications. In versions starting from 13.0 to before 14.2.30 and 15.0.0 to before 15.2.2, Next.js may have allowed limited source code exposure when the dev server was running with the App Router enab…

  vercel next.js next npm
  May 30, 2025
• Low 3.7
  CVE-2025-32421 Public exploit

  Next.js Race Condition to Cache Poisoning

  Next.js is a React framework for building full-stack web applications. Versions prior to 14.2.24 and 15.1.6 have a race-condition vulnerability. This issue only affects the Pages Router under certain misconfigurations, causing normal endpoints to serve `pageP…

  vercel next.js next npm
  May 14, 2025
• Low 1.7
  CVE-2025-30218

  Next.js may leak x-middleware-subrequest-id to external hosts

  Next.js is a React framework for building full-stack web applications. To mitigate CVE-2025-29927, Next.js validated the x-middleware-subrequest-id which persisted across multiple incoming requests. However, this subrequest ID is sent to all requests, even if…

  vercel next.js next npm
  Apr 2, 2025