Vulnerability index

Browse CVEs

58 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Next.js MEDIUM 6.5
CVE-2026-64649

Next.js is a React framework for building full-stack web applications. In versions 14.1.1 through 15.5.20 and 16.0.0 through 16.2.10, when a Server A…

Fix: 15.5.21 / 16.2.11+
Fix from $1,600 2026-07-27
Next.js MEDIUM 5.4
CVE-2026-64648

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side …

Fix: 15.5.21 / 16.2.11+
Fix from $1,600 2026-07-27
Next.js MEDIUM 5.4
CVE-2026-64647

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side f…

Fix: 15.5.21 / 16.2.11+
Fix from $1,600 2026-07-27
Next.js MEDIUM 5.3
CVE-2026-64646

Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests target…

Fix: 15.5.21 / 16.2.11+
Fix from $1,600 2026-07-27
Next.js HIGH 8.2
CVE-2026-64642

Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applica…

Fix: 16.2.11+
Fix from $1,950 2026-07-27
Next.js MEDIUM 6.1
CVE-2026-64645

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a rewrites() o…

Fix: 15.5.21 / 16.2.11+
Fix from $1,600 2026-07-27
Next.js MEDIUM 5.3
CVE-2026-64643

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, Next.js applica…

Fix: 15.5.21 / 16.2.11+
Fix from $1,600 2026-07-27
Next.js MEDIUM 5.3
CVE-2026-64644

Next.js is a React framework for building full-stack web applications. In versions 15.5.0 through 15.5.20 and 16.0.0 through 16.2.10, when self-hosti…

Fix: 15.5.21 / 16.2.11+
Fix from $1,600 2026-07-27
Next.js HIGH 7.5
CVE-2026-64641

Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, crafted request…

Fix: 15.5.21 / 16.2.11+
Fix from $1,950 2026-07-27
Ai MEDIUM 6.5
CVE-2026-8769

A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandl…

Fix: after 3.0.97
Fix from $1,600 2026-05-17
Ai HIGH 7.5
CVE-2026-8767

A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the…

Fix: after 3.0.97
Fix from $1,950 2026-05-17
Ai HIGH 7.3
CVE-2026-8768

A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src…

Fix: after 3.0.97
Fix from $1,950 2026-05-17
Turborepo Language Server Protocol HIGH 7.8
CVE-2026-46508

Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo LSP VS Code extension could e…

Fix: 2.9.14000+
Fix from $1,950 2026-05-15
Turborepo MEDIUM 6.5
CVE-2026-45773

Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14, Turborepo's self-hosted login and SSO browser …

Fix: 2.9.14+
Fix from $1,600 2026-05-15
Turborepo CRITICAL 9.8
CVE-2026-45772

Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turborepo can be vulnerable to arb…

Fix: 2.9.14+
Fix from $2,300 2026-05-15
Next.js HIGH 7.5
CVE-2026-45109

Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing…

Fix: 15.5.18 / 16.2.6+
Fix from $1,950 2026-05-13
Next.js HIGH 7.5
CVE-2026-44579

Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering th…

Fix: 15.5.16 / 16.2.5+
Fix from $1,950 2026-05-13
Next.js MEDIUM 6.1
CVE-2026-44580

Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteract…

Fix: 15.5.16 / 16.2.5+
Fix from $1,600 2026-05-13
Next.js HIGH 8.6
CVE-2026-44578EPSS 39%

Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the …

Fix: 15.5.16 / 16.2.5+
Fix from $1,950 2026-05-13
Next.js MEDIUM 5.9
CVE-2026-44577

Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the d…

Fix: 15.5.16 / 16.2.5+
Fix from $1,600 2026-05-13
Next.js MEDIUM 5.4
CVE-2026-44576

Next.js is a React framework for building full-stack web applications. From 14.2.0 to before 15.5.16 and 16.2.5, applications using React Server Comp…

Fix: 15.5.16 / 16.2.5+
Fix from $1,600 2026-05-13
Next.js HIGH 8.1
CVE-2026-44574

Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware…

Fix: 15.5.16 / 16.2.5+
Fix from $1,950 2026-05-13
Next.js HIGH 7.5
CVE-2026-44573

Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router …

Fix: 15.5.16 / 16.2.5+
Fix from $1,950 2026-05-13
Next.js HIGH 7.5
CVE-2026-44575

Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on…

Fix: 15.5.16 / 16.2.5+
Fix from $1,950 2026-05-13
Next.js MEDIUM 5.9
CVE-2026-44572

Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, an external client could send a x-ne…

Fix: 15.5.16 / 16.2.5+
Fix from $1,600 2026-05-13
Vercel MEDIUM 5.5
CVE-2026-44479

Vercel’s AI Cloud is a unified platform for building modern applications. From 50.16.0 to 52.0.0, hen the Vercel CLI runs in non-interactive mode (-…

Fix: 52.0.1+
Fix from $1,600 2026-05-13
Next.js MEDIUM 6.5
CVE-2026-29057

Next.js is a React framework for building full-stack web applications. Starting in version 9.5.0 and prior to versions 15.5.13 and 16.1.7, when Next.…

Fix: 15.5.13 / 16.1.7+
Fix from $1,600 2026-03-18
Next.js HIGH 7.5
CVE-2026-27979

Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, a request containing t…

Fix: 16.1.7+
Fix from $1,950 2026-03-18
Next.js HIGH 7.5
CVE-2026-27980

Next.js is a React framework for building full-stack web applications. Starting in version 10.0.0 and prior to version 16.1.7, the default Next.js im…

Fix: 16.1.7+
Fix from $1,950 2026-03-18
Next.js MEDIUM 5.4
CVE-2026-27977

Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, in `next dev`, cross-s…

Fix: 16.1.7+
Fix from $1,600 2026-03-18