Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
streams for Apache Kafka 2/next
Red Hat
· Package
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Next.js: Unauthenticated disclosure of internal Server Function endpoints
CVE-2026-64643 · GHSA-955P-X3MX-JCVP
next
Red Hat Enterprise Linux 10/firefox
npm
Red Hat
Medium
Fix reported
2026-09-10
Next.js vulnerable to cross-site scripting in App Router applications using CSP nonces
CVE-2026-44581 · GHSA-FFHC-5MCF-PF4Q
next
Red Hat Enterprise Linux 10/firefox
npm
Red Hat
Medium
Fix reported
2026-09-10
Next.js's Middleware / Proxy redirects can be cache-poisoned
CVE-2026-44572 · GHSA-3G8H-86W9-WVMQ
next
Red Hat Enterprise Linux 10/firefox
npm
Red Hat
Low
Fix reported
2026-09-10
Next.js: Denial of Service in the Image Optimization API using SVGs
CVE-2026-64644 · GHSA-Q8WF-6R8G-63CH
next
streams for Apache Kafka 2/next
npm
Red Hat
Medium
Fix reported
2026-09-10
Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences
CVE-2026-64647 · GHSA-4633-3J49-MH5Q
next
Red Hat Enterprise Linux 10/firefox
npm
Red Hat
Medium
Fix reported
2026-09-10
Next.js vulnerable to cache poisoning via collisions in React Server Component cache-busting
CVE-2026-44582 · GHSA-VFV6-92FF-J949
next
Red Hat Enterprise Linux 10/firefox
npm
Red Hat
Low
Fix reported
2026-09-10
Next.js vulnerable to cache poisoning in React Server Component responses
CVE-2026-44576 · GHSA-WFC6-R584-VFW7
next
Red Hat Enterprise Linux 10/firefox
npm
Red Hat
Medium
Fix reported
2026-09-10
