Browse CVEs

MEDIUM 6.5 CVE-2026-64649 Next.js is a React framework for building full-stack web applications. In versions 14.1.1 through 15.5.20 and 16.0.0 through 16.2.10, when a Server A… Next.js 15.5.21 / 16.2.11+ Fix from $1,6002026-07-27 MEDIUM 5.4 CVE-2026-64648 Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side … Next.js 15.5.21 / 16.2.11+ Fix from $1,6002026-07-27 MEDIUM 5.4 CVE-2026-64647 Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side f… Next.js 15.5.21 / 16.2.11+ Fix from $1,6002026-07-27 MEDIUM 5.3 CVE-2026-64646 Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests target… Next.js 15.5.21 / 16.2.11+ Fix from $1,6002026-07-27 HIGH 8.2 CVE-2026-64642 Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applica… Next.js 16.2.11+ Fix from $1,9502026-07-27 MEDIUM 6.1 CVE-2026-64645 Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a rewrites() o… Next.js 15.5.21 / 16.2.11+ Fix from $1,6002026-07-27 MEDIUM 5.3 CVE-2026-64643 Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, Next.js applica… Next.js 15.5.21 / 16.2.11+ Fix from $1,6002026-07-27 MEDIUM 5.3 CVE-2026-64644 Next.js is a React framework for building full-stack web applications. In versions 15.5.0 through 15.5.20 and 16.0.0 through 16.2.10, when self-hosti… Next.js 15.5.21 / 16.2.11+ Fix from $1,6002026-07-27 HIGH 7.5 CVE-2026-64641 Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, crafted request… Next.js 15.5.21 / 16.2.11+ Fix from $1,9502026-07-27 MEDIUM 6.5 CVE-2026-8769 A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandl… Ai after 3.0.97 Fix from $1,6002026-05-17 HIGH 7.5 CVE-2026-8767 A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the… Ai after 3.0.97 Fix from $1,9502026-05-17 HIGH 7.3 CVE-2026-8768 A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src… Ai after 3.0.97 Fix from $1,9502026-05-17 HIGH 7.8 CVE-2026-46508 Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo LSP VS Code extension could e… Turborepo Language Server Protocol 2.9.14000+ Fix from $1,9502026-05-15 MEDIUM 6.5 CVE-2026-45773 Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14, Turborepo's self-hosted login and SSO browser … Turborepo 2.9.14+ Fix from $1,6002026-05-15 CRITICAL 9.8 CVE-2026-45772 Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turborepo can be vulnerable to arb… Turborepo 2.9.14+ Fix from $2,3002026-05-15 HIGH 7.5 CVE-2026-45109 Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing… Next.js 15.5.18 / 16.2.6+ Fix from $1,9502026-05-13 HIGH 7.5 CVE-2026-44579 Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering th… Next.js 15.5.16 / 16.2.5+ Fix from $1,9502026-05-13 MEDIUM 6.1 CVE-2026-44580 Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteract… Next.js 15.5.16 / 16.2.5+ Fix from $1,6002026-05-13 HIGH 8.6 CVE-2026-44578EPSS 39% Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the … Next.js 15.5.16 / 16.2.5+ Fix from $1,9502026-05-13 MEDIUM 5.9 CVE-2026-44577 Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the d… Next.js 15.5.16 / 16.2.5+ Fix from $1,6002026-05-13 MEDIUM 5.4 CVE-2026-44576 Next.js is a React framework for building full-stack web applications. From 14.2.0 to before 15.5.16 and 16.2.5, applications using React Server Comp… Next.js 15.5.16 / 16.2.5+ Fix from $1,6002026-05-13 HIGH 8.1 CVE-2026-44574 Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware… Next.js 15.5.16 / 16.2.5+ Fix from $1,9502026-05-13 HIGH 7.5 CVE-2026-44573 Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router … Next.js 15.5.16 / 16.2.5+ Fix from $1,9502026-05-13 HIGH 7.5 CVE-2026-44575 Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on… Next.js 15.5.16 / 16.2.5+ Fix from $1,9502026-05-13 MEDIUM 5.9 CVE-2026-44572 Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, an external client could send a x-ne… Next.js 15.5.16 / 16.2.5+ Fix from $1,6002026-05-13 MEDIUM 5.5 CVE-2026-44479 Vercel’s AI Cloud is a unified platform for building modern applications. From 50.16.0 to 52.0.0, hen the Vercel CLI runs in non-interactive mode (-… Vercel 52.0.1+ Fix from $1,6002026-05-13 MEDIUM 6.5 CVE-2026-29057 Next.js is a React framework for building full-stack web applications. Starting in version 9.5.0 and prior to versions 15.5.13 and 16.1.7, when Next.… Next.js 15.5.13 / 16.1.7+ Fix from $1,6002026-03-18 HIGH 7.5 CVE-2026-27979 Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, a request containing t… Next.js 16.1.7+ Fix from $1,9502026-03-18 HIGH 7.5 CVE-2026-27980 Next.js is a React framework for building full-stack web applications. Starting in version 10.0.0 and prior to version 16.1.7, the default Next.js im… Next.js 16.1.7+ Fix from $1,9502026-03-18 MEDIUM 5.4 CVE-2026-27977 Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, in `next dev`, cross-s… Next.js 16.1.7+ Fix from $1,6002026-03-18