Repository navigation
Security: vercel/next.js
Security Advisories
View information about security vulnerabilities from this repository's maintainers.
-
Middleware / Proxy bypass in App Router applications via segment-prefetch routesGHSA-267c-6grr-h53f published
May 6, 2026 by timneutkensHigh -
Cross-site scripting in App Router applications using CSP noncesGHSA-ffhc-5mcf-pf4q published
May 6, 2026 by timneutkensModerate -
Cache poisoning via collisions in React Server Component cache-bustingGHSA-vfv6-92ff-j949 published
May 6, 2026 by timneutkensLow -
Cross-site scripting in beforeInteractive scripts with untrusted inputGHSA-gx5p-jg67-6x7h published
May 6, 2026 by timneutkensModerate -
Denial of Service via connection exhaustion in applications using Cache ComponentsGHSA-mg66-mrh9-m8jx published
May 6, 2026 by timneutkensHigh -
Middleware / Proxy bypass through dynamic route parameter injectionGHSA-492v-c6pp-mqqv published
May 6, 2026 by timneutkensHigh -
Denial of Service in the Image Optimization APIGHSA-h64f-5h5j-jqjh published
May 6, 2026 by timneutkensModerate -
Server-side request forgery in applications using WebSocket upgradesGHSA-c4j6-fc7j-m34r published
May 6, 2026 by timneutkensHigh -
Cache poisoning in React Server Component responsesGHSA-wfc6-r584-vfw7 published
May 6, 2026 by timneutkensModerate -
Middleware / Proxy bypass in Pages Router applications using i18nGHSA-36qx-fr4f-26g5 published
May 6, 2026 by timneutkensHigh