Skip to content
OpenAdvisories

Vendor

vercel

76 known vulnerabilities.

Products

next.js 57 ai 3 turborepo 3 next 3 pkg 1 hyper 1 flags 1 @ai-sdk/harness-codex 1 @ai-sdk/harness-opencode 1 ms 1 vercel 1 Nuxt Devtools 1 deepsec 1 satori 1 AI SDK 1
All Critical High Medium Low Exploited only Public exploit

42 results · Clear filters · Feed

  • Medium 6.9
    CVE-2021-37699

    Open Redirect in Next.js versions below 11.1.0

    Next.js is an open source website development framework to be used with the React library. In affected versions specially encoded paths could be used when pages/_error.js was statically generated allowing an open redirect to occur to an external site. In gene…

    vercel next.js next npm
  • Medium 4.7
    CVE-2020-15242

    Open Redirect in Next.js

    Next.js versions >=9.5.0 and <9.5.4 are vulnerable to an Open Redirect. Specially encoded paths could be used with the trailing slash redirect to allow an open redirect to occur to an external site. In general, this redirect does not directly harm users altho…

    vercel next.js next npm