vercel next.js
57 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-94482 | >= 13.0.0, < 15.5.28 ; >= 16.0.0, < 16.4.1 | Next.js: Denial of Service in App Router using Server Actions | HIGH 8.2 | 0.4 % | ||
| CVE-2026-94484 | >= 15.0.0, < 15.5.27 ; >= 16.0.0, < 16.3.8 | Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service | MEDIUM 6.3 | 0.2 % | ||
| CVE-2026-94485 | >= 16.0.0, < 16.3.8 | Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass | MEDIUM 6.3 | 0.2 % | ||
| CVE-2026-94483 | >= 16.0.0, < 16.3.8 | Next.js: Server-Side Request Forgery in Image Optimization | HIGH 8.3 | 0.3 % | ||
| CVE-2026-94543 | >= 15.0.0, < 15.5.27 ; >= 16.0.0, < 16.3.8 | Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications | MEDIUM 6.3 | 0.5 % | ||
| CVE-2026-94544 | >= 16.3.0, < 16.3.8 | Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages | MEDIUM 6.3 | 0.2 % | ||
| CVE-2026-94486 | >= 16.0.0, < 16.3.8 | Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint | LOW 2.3 | 0.1 % | ||
| CVE-2026-103004 | < 16.3.8 | next.js cache leak on warm `use cache` handlers accessing root param | MEDIUM 6.3 | 0.3 % | ||
| CVE-2026-75604 | >= 13.4.0, < 15.5.24 ; >= 16.0.0, < 16.3.3 | Next.js: Unauthenticated Remote Code Execution on windows-hosted servers | CRITICAL 9.0 | 2.1 % | ||
| CVE-2026-64649 | >= 14.1.1, < 15.5.21 ; >= 16.0.0 < 16.2.11 | Next.js: Server-Side Request Forgery in Server Actions on Custom Servers | HIGH 8.3 | 0.5 % | ||
| CVE-2026-64648 | >= 13.0.0, < 15.5.21 ; >= 16.0.0, < 16.2.11 | Next.js: Response Body Cache Confusion for Requests Containing Bodies | MEDIUM 6.0 | 0.3 % | ||
| CVE-2026-64647 | >= 13.0.0, < 15.5.21 ; >= 16.0.0, < 16.2.11 | Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies | MEDIUM 6.3 | 0.3 % | ||
| CVE-2026-64646 | >= 13.0.0 < 15.5.21 ; >= 16.0.0, < 16.2.11 | Next.js: Unbounded Server Action payload in Edge runtime | MEDIUM 6.3 | 0.5 % | ||
| CVE-2026-64644 | >= 15.5.0, < 15.5.21 ; >= 16.0.0, < 16.2.11 | Next.js: Denial of Service in the Image Optimization API using SVGs | MEDIUM 6.3 | 0.7 % | ||
| CVE-2026-64643 | >= 13.0.0, < 15.5.21 ; >= 16.0.0, < 16.2.11 | Next.js: Unauthenticated Disclosure of Internal Server Function endpoints | MEDIUM 6.3 | 0.5 % | ||
| CVE-2026-64642 | >= 16.0.0, < 16.2.11 | Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale | HIGH 8.3 | 0.6 % | ||
| CVE-2026-64641 | >= 13.0.0, < 15.5.21 ; >= 16.0.0, < 16.2.11 | Next.js: Denial of Service in App Router using Server Actions | HIGH 8.2 | 0.9 % | ||
| CVE-2026-64645 | >= 12.0.0 < 15.5.21 ; >= 16.0.0, < 16.2.11 | Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname | HIGH 8.3 | 0.4 % | ||
| CVE-2026-45109 | >= 15.2.0, < 15.5.17 ; >= 16.0.0, < 16.2.6 | Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes | HIGH 7.5 | 0.6 % | ||
| CVE-2026-44582 | >= 13.4.6, < 15.5.16 ; >= 16.0.0, < 16.2.5 | Next.js: Cache poisoning via collisions in React Server Component cache-busting | LOW 3.7 | 0.2 % | ||
| CVE-2026-44581 | >= 13.4.0, < 15.5.16 ; >= 16.0.0, < 16.2.5 | Next.js: Cross-site scripting in App Router applications using CSP nonces | MEDIUM 4.7 | 0.2 % | ||
| CVE-2026-44580 | >= 13.0.0, < 15.5.16 ; >= 16.0.0, < 16.2.5 | Next.js: Cross-site scripting in beforeInteractive scripts with untrusted input | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-44579 | >= 16.0.0, < 16.2.5 ; >= 15.0.0, < 15.5.16 | Next.js: Denial of Service via connection exhaustion in applications using Cache Components | HIGH 7.5 | 0.7 % | ||
| CVE-2026-44578 | >= 16.0.0, < 16.2.5 ; >= 13.4.13, < 15.5.16 | Next.js: Server-side request forgery in applications using WebSocket upgrades | HIGH 8.6 | 36 % | ||
| CVE-2026-44577 | >= 10.0.0, < 15.5.16 ; >= 16.0.0, < 16.2.5 | Next.js: Denial of Service in the Image Optimization API | HIGH 7.5 | 0.7 % | ||
| CVE-2026-44576 | >= 14.2.0, < 15.5.16 ; >= 16.0.0, < 16.2.5 | Next.js: Cache poisoning in React Server Component responses | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-44574 | >= 15.4.0, < 15.5.16 ; >= 16.0.0, < 16.2.5 | Next.js: Middleware / Proxy bypass through dynamic route parameter injection | HIGH 8.1 | 0.6 % | ||
| CVE-2026-44575 | >= 16.0.0, < 16.2.5 ; >= 15.2.0, < 15.5.16 | Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes | HIGH 7.5 | 1.6 % | ||
| CVE-2026-44573 | >= 12.2.0, < 15.5.16 ; >= 16.0.0, < 16.2.5 | Next.js: Middleware / Proxy bypass in Pages Router applications using i18n | HIGH 7.5 | 0.8 % | ||
| CVE-2026-44572 | >= 12.2.0, < 15.5.16 ; >= 16.0.0, < 16.2.5 | Next.js: Middleware / Proxy redirects can be cache-poisoned | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-29057 | >= 16.0.0-beta.0, < 16.1.7 ; >= 9.5.0, < 15.5.13 | Next.js: HTTP request smuggling in rewrites | MEDIUM 6.3 | 0.5 % | ||
| CVE-2026-27980 | >= 10.0.0, < 16.1.7 | Next.js: Unbounded next/image disk cache growth can exhaust storage | MEDIUM 6.9 | 0.7 % | ||
| CVE-2026-27979 | >= 16.0.1, < 16.1.7 | Next.js: Unbounded postponed resume buffering can lead to DoS | MEDIUM 6.9 | 0.7 % | ||
| CVE-2026-27978 | >= 16.0.1, < 16.1.7 | Next.js: null origin can bypass Server Actions CSRF checks | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-27977 | >= 16.0.1, < 16.1.7 | Next.js: null origin can bypass dev HMR websocket CSRF checks | LOW 2.3 | 0.2 % | ||
| CVE-2025-57752 | >= 15.0.0, < 15.4.5 ; < 14.2.31 | Next.js Affected by Cache Key Confusion for Image Optimization API Routes | MEDIUM 6.2 | 0.3 % | ||
| CVE-2025-55173 | >= 15.0.0, < 15.4.5 ; < 14.2.31 | Next.js Content Injection Vulnerability for Image Optimization | MEDIUM 4.3 | 0.6 % | ||
| CVE-2025-57822 | < 14.2.32 ; < 15.4.7 | Next.js Improper Middleware Redirect Handling Leads to SSRF | HIGH 8.2 | 2.6 % | ||
| CVE-2025-49826 | >= 15.0.4-canary.51, < 15.1.8 | Next.js DoS vulnerability via cache poisoning | HIGH 7.5 | 1.1 % | ||
| CVE-2025-49005 | >= 15.3.0, < 15.3.3 | Next.js cache poisoning due to omission of Vary header | LOW 3.7 | 0.5 % | ||
| CVE-2025-48068 | >= 13.0, < 14.2.30 ; >= 15.0.0, < 15.2.2 | Information exposure in Next.js dev server due to lack of origin verification | LOW 2.3 | 0.2 % | ||
| CVE-2025-32421 | < 14.2.24 ; >= 15.0.0, < 15.1.6 | Next.js Race Condition to Cache Poisoning | LOW 3.7 | 0.8 % | ||
| CVE-2025-30218 | = 12.3.5 ; = 13.5.9 ; = 14.2.25 ; … | Next.js may leak x-middleware-subrequest-id to external hosts | LOW 1.7 | 0.4 % | ||
| CVE-2025-29927 | >= 11.1.4, < 12.3.5 ; >= 14.0.0, < 14.2.25 ; >= 15.0.0, < 15.2.3 ; … | Authorization Bypass in Next.js Middleware | CRITICAL 9.1 | 99 % | ||
| CVE-2024-56332 | >= 13.0.0, < 13.5.8 ; >= 14.0.0, < 14.2.21 ; >= 15.0.0, < 15.1.2 | Next.js Vulnerable to Denial of Service (DoS) with Server Actions | MEDIUM 5.3 | 0.8 % | ||
| CVE-2024-51479 | >= 9.5.5, < 14.2.15 | Authorization bypass in Next.js | HIGH 7.5 | 4.0 % | ||
| CVE-2024-47831 | >= 10.0.0, < 14.2.7 | Next.js image optimization has Denial of Service condition | HIGH 7.5 | 0.7 % | ||
| CVE-2024-46982 | >= 13.5.1, < 13.5.7 ; >= 14.0.0, < 14.2.10 | Cache Poisoning in next.js | HIGH 7.5 | 59 % | ||
| CVE-2024-39693 | >= 13.3.1, < 13.5.0 | Next.js Denial of Service (DoS) condition | HIGH 7.5 | 0.5 % | ||
| CVE-2024-34351 | >= 13.4.0, < 14.1.1 | Next.js Server-Side Request Forgery in Server Actions | HIGH 7.5 | 5.5 % | ||
| CVE-2024-34350 | >= 13.4.0, < 13.5.1 | Next.js Vulnerable to HTTP Request Smuggling | HIGH 7.5 | 1.2 % | ||
| CVE-2022-36046 | = 12.2.3 | Unexpected server crash in Next.js version 12.2.3 | MEDIUM 5.3 | 1.2 % | ||
| CVE-2022-23646 | >= 10.0.0, < 12.1.0 | Improper CSP in Image Optimization API for Next.js | HIGH 7.5 | 1.8 % | ||
| CVE-2021-43803 | >= 11.1.0, < 11.1.3 ; >= 12.0.0, < 12.0.5 | Unexpected server crash in Next.js | HIGH 7.5 | 47 % | ||
| CVE-2021-39178 | >= 10.0.0, < 11.1.1 | XSS in Image Optimization API for Next.js versions between 10.0.0 and 11.1.0 | HIGH 7.5 | 1.1 % | ||
| CVE-2021-37699 | < 11.1.0 | Open Redirect in Next.js versions below 11.1.0 | MEDIUM 6.9 | 1.0 % | ||
| CVE-2020-15242 | >= 9.5.0, <9.5.4 | Open Redirect in Next.js | MEDIUM 6.1 | 0.8 % |