Next.js vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
45 matching records
- CriticalNext.js: Unauthenticated Remote Code Execution in functions returning typed arraysOpen the advisoryOct 22, 2026
- High7.5Next.js: Denial of Service in App Router using Server ActionsCheck if you run itEPSS 0.39%Oct 22, 2026
- High7.5OpenNext Cloudflare is an open Next.js adapter for Cloudflare.Check if you run itEPSS 0.40%Oct 15, 2026
- Medium6.1The auth0/nextjs-auth0 SDK validates that the returnTo parameter is a same-origin URL.Check if you run itEPSS 0.22%Oct 13, 2026
- Medium6.3next.js cache leak across root param values in nested 'use cache' functionsCheck if you run itEPSS 0.25%Oct 1, 2026
- High7.5Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.60%May 13, 2026
- Low3.7Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.21%May 13, 2026
- Medium4.7Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.22%May 13, 2026
- Medium6.1Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.21%May 13, 2026
- High7.5Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.75%May 13, 2026
- High8.6Next.js is a React framework for building full-stack web applications.Check this weekEPSS 35.54%May 13, 2026
- Medium5.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.74%May 13, 2026
- Medium5.4Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.29%May 13, 2026
- High8.1Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.64%May 13, 2026
- High7.5Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.80%May 13, 2026
- Medium5.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.28%May 13, 2026
- High7.5Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 1.59%May 7, 2026
- Medium5.5Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams.Check if you run itEPSS 0.15%Apr 21, 2026
- Medium6.9next-intl provides internationalization for Next.js.Check if you run itEPSS 0.34%Apr 17, 2026
- Medium5.4The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.Check if you run itEPSS 0.21%Apr 17, 2026
- Medium6.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.45%Mar 18, 2026
- Medium6.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.71%Mar 18, 2026
- Medium6.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.69%Mar 18, 2026
- Medium5.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.21%Mar 18, 2026
- Low2.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.18%Mar 18, 2026