Next.js vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
45 matching records
- High8.3Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.Check if you run itEPSS 0.63%Mar 10, 2026
- Medium6.0Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.Check if you run itEPSS 0.31%Mar 6, 2026
- High8.2Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.Check if you run itEPSS 0.41%Mar 6, 2026
- High7.7A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package, resulting from a path normalization bypass in the /cdn-cgi/ima…Check if you run itEPSS 0.40%Mar 4, 2026
- Medium5.4Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.Check if you run itEPSS 0.32%Feb 20, 2026
- Medium5.7The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.Check if you run itEPSS 0.26%Dec 11, 2025
- High7.5facebook react Deserialization of Untrusted DataPatch nowKEVEPSS 66.62%Dec 11, 2025
- Medium5.4The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.Check if you run itEPSS 0.20%Dec 10, 2025
- None0.0Next.js is vulnerable to RCE in React flight protocolCheck if you run itEPSS 0.00%Dec 3, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 3, 2025
- High8.0The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js.Check if you run itEPSS 0.39%Nov 21, 2025
- Medium6.5Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 2.58%Aug 29, 2025
- Medium6.2Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.35%Aug 29, 2025
- Medium4.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.60%Aug 29, 2025
- High7.8A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package.Check if you run itEPSS 0.97%Jun 16, 2025
- High7.7The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.Check if you run itEPSS 0.43%Jun 4, 2025
- Medium4.9The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.Check if you run itEPSS 0.44%Apr 29, 2025
- Unknownvercel next.js Improper AuthorizationPatch nowKEVEPSS 99.22%Mar 28, 2025
- Unknownvercel next.js Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 59.18%Feb 11, 2025
- Medium4.3zeit next.js Relative Path TraversalPatch nowKEVEPSS 44.78%Mar 30, 2020