CVE-2026-94484
Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service
Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response cache key that is insufficiently scoped to the source route. A single unauthenticated crafted request can poison that cache, causing cross-user content substitution or persistent denial of service until the poisoned entry is revalidated or replaced. This issue is fixed in versions 15.5.27 and 16.3.8.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
6.3
Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service
Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response cache key that is insufficiently scoped to the source route. A single unauthenticated crafted request can poison that cache, causing cross-user content substitution or persistent denial of service until the poisoned entry is revalidated or replaced. This issue is fixed in versions 15.5.27 and 16.3.8.
- Record
CVE-2026-94484- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N - Weakness
- CWE-524
- Updated
- 2026-11-02
EUVDEUVD-2026-91674
6.3
Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response cache key that is insufficiently scoped to the source route. A single unauthenticated crafted request can poison that cache, causing cross-user content substitution or persistent denial of service until the poisoned entry is revalidated or replaced. This issue is fixed in versions 15.5.27 and 16.3.8.
- Record
EUVD-2026-91674- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-mcj8-r9mp-w47p
6.3
Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service
Next.js applications that use a root-level catch-all page together with statically generated or Incremental Static Regeneration routes can have their shared response cache poisoned by a single unauthenticated crafted request.
- Record
GHSA-mcj8-r9mp-w47p- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N - CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-524
- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-mwv6-3258-q52c
7.5
Next Vulnerable to Denial of Service with Server Components
A vulnerability affects certain React packages for versions 19.0.0, 19.0.1, 19.1.0, 19.1.1, 19.1.2, 19.2.0, and 19.2.1 and frameworks that use the affected packages, including Next.js 15.x and 16.x using the App Router. The issue is tracked upstream as CVE-2025-55184.
A malicious HTTP request can be crafted and sent to any App Router endpoint that, when deserialized, can cause the server process to hang and consume CPU. This can result in denial of service in unpatched environments.
- Record
GHSA-mwv6-3258-q52c- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400, CWE-502, CWE-1395
- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-w37m-7fhw-fmv9
5.3
Next Server Actions Source Code Exposure
A vulnerability affects certain React packages for versions 19.0.0, 19.0.1, 19.1.0, 19.1.1, 19.1.2, 19.2.0, and 19.2.1 and frameworks that use the affected packages, including Next.js 15.x and 16.x using the App Router. The issue is tracked upstream as CVE-2025-55183.
A malicious HTTP request can be crafted and sent to any App Router endpoint that can return the compiled source code of Server Functions. This could reveal business logic, but would not expose secrets unless they were hardcoded directly into Server Function code.
- Record
GHSA-w37m-7fhw-fmv9- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-497, CWE-502, CWE-1395
- Updated
- 2026-11-02
NVD
6.3
Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response cache key that is insufficiently scoped to the source route. A single unauthenticated crafted request can poison that cache, causing cross-user content substitution or persistent denial of service until the poisoned entry is revalidated or replaced. This issue is fixed in versions 15.5.27 and 16.3.8.
- Record
CVE-2026-94484- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-524
- Updated
- 2026-11-02
Show 50 moreShow less
OSV
6.3
Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service
Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response cache key that is insufficiently scoped to the source route. A single unauthenticated crafted request can poison that cache, causing cross-user content substitution or persistent denial of service until the poisoned entry is revalidated or replaced. This issue is fixed in versions 15.5.27 and 16.3.8.
- Record
CVE-2026-94484- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N - Weakness
- CWE-524
- Updated
- 2026-11-02
OSVGHSA-mcj8-r9mp-w47p
6.3
Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service
Next.js applications that use a root-level catch-all page together with statically generated or Incremental Static Regeneration routes can have their shared response cache poisoned by a single unauthenticated crafted request.
- Record
GHSA-mcj8-r9mp-w47p- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N - CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-524
- Updated
- 2026-11-02
OSVGHSA-mwv6-3258-q52c
7.5
Next Vulnerable to Denial of Service with Server Components
A vulnerability affects certain React packages for versions 19.0.0, 19.0.1, 19.1.0, 19.1.1, 19.1.2, 19.2.0, and 19.2.1 and frameworks that use the affected packages, including Next.js 15.x and 16.x using the App Router. The issue is tracked upstream as CVE-2025-55184.
A malicious HTTP request can be crafted and sent to any App Router endpoint that, when deserialized, can cause the server process to hang and consume CPU. This can result in denial of service in unpatched environments.
- Record
GHSA-mwv6-3258-q52c- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-1395, CWE-400, CWE-502
- Updated
- 2026-11-02
OSVGHSA-w37m-7fhw-fmv9
5.3
Next Server Actions Source Code Exposure
A vulnerability affects certain React packages for versions 19.0.0, 19.0.1, 19.1.0, 19.1.1, 19.1.2, 19.2.0, and 19.2.1 and frameworks that use the affected packages, including Next.js 15.x and 16.x using the App Router. The issue is tracked upstream as CVE-2025-55183.
A malicious HTTP request can be crafted and sent to any App Router endpoint that can return the compiled source code of Server Functions. This could reveal business logic, but would not expose secrets unless they were hardcoded directly into Server Function code.
- Record
GHSA-w37m-7fhw-fmv9- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-1395, CWE-497, CWE-502
- Updated
- 2026-11-02
OSVCLSA-2026-1791684070 No score
TuxCare security update for 21 packages (2 CVEs)
TuxCare rebuilt 21 packages to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.
- Record
CLSA-2026-1791684070- Updated
- 2026-11-02
OSVCLSA-2026-1791685051 No score
TuxCare security update for 21 packages (1 CVE)
TuxCare rebuilt 21 packages to address 1 CVE. Fixed in 15.5.26-tuxcare.2.
- Record
CLSA-2026-1791685051- Updated
- 2026-11-02
OSVCLSA-2026-1791686070 No score
TuxCare security update for 21 packages (2 CVEs)
TuxCare rebuilt 21 packages to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.
- Record
CLSA-2026-1791686070- Updated
- 2026-11-02
OSVCLSA-2026-1791901908 No score
TuxCare security update for 9 packages (10 CVEs)
TuxCare rebuilt 9 packages to address 10 CVEs. Fixed in 15.1.2-tuxcare.3.
- Record
CLSA-2026-1791901908- Updated
- 2026-11-02
OSVCLSA-2026-1791972524 No score
TuxCare security update for next (1 CVE)
TuxCare rebuilt next to address 1 CVE. Fixed in 15.5.25-tuxcare.3.
- Record
CLSA-2026-1791972524- Updated
- 2026-11-02
OSVCLSA-2026-1791978826 No score
TuxCare security update for next (5 CVEs)
TuxCare rebuilt next to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.
- Record
CLSA-2026-1791978826- Updated
- 2026-11-02
OSVCLSA-2026-1792195722 No score
TuxCare security update for create-next-app (2 CVEs)
TuxCare rebuilt create-next-app to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.
- Record
CLSA-2026-1792195722- Updated
- 2026-11-02
OSVCLSA-2026-1792195723 No score
TuxCare security update for create-next-app (1 CVE)
TuxCare rebuilt create-next-app to address 1 CVE. Fixed in 15.5.26-tuxcare.2.
- Record
CLSA-2026-1792195723- Updated
- 2026-11-02
OSVCLSA-2026-1792195724 No score
TuxCare security update for create-next-app (2 CVEs)
TuxCare rebuilt create-next-app to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.
- Record
CLSA-2026-1792195724- Updated
- 2026-11-02
OSVCLSA-2026-1792195752 No score
TuxCare security update for create-next-app (5 CVEs)
TuxCare rebuilt create-next-app to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.
- Record
CLSA-2026-1792195752- Updated
- 2026-11-02
OSVCLSA-2026-1792195757 No score
TuxCare security update for create-next-app (1 CVE)
TuxCare rebuilt create-next-app to address 1 CVE. Fixed in 15.5.25-tuxcare.3.
- Record
CLSA-2026-1792195757- Updated
- 2026-11-02
OSVCLSA-2026-1792196715 No score
TuxCare security update for @next/eslint-plugin-next (2 CVEs)
TuxCare rebuilt @next/eslint-plugin-next to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.
- Record
CLSA-2026-1792196715- Updated
- 2026-11-02
OSVCLSA-2026-1792196716 No score
TuxCare security update for @next/eslint-plugin-next (1 CVE)
TuxCare rebuilt @next/eslint-plugin-next to address 1 CVE. Fixed in 15.5.26-tuxcare.2.
- Record
CLSA-2026-1792196716- Updated
- 2026-11-02
OSVCLSA-2026-1792196717 No score
TuxCare security update for @next/eslint-plugin-next (2 CVEs)
TuxCare rebuilt @next/eslint-plugin-next to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.
- Record
CLSA-2026-1792196717- Updated
- 2026-11-02
OSVCLSA-2026-1792196732 No score
TuxCare security update for @next/eslint-plugin-next (5 CVEs)
TuxCare rebuilt @next/eslint-plugin-next to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.
- Record
CLSA-2026-1792196732- Updated
- 2026-11-02
OSVCLSA-2026-1792196897 No score
TuxCare security update for @next/eslint-plugin-next (1 CVE)
TuxCare rebuilt @next/eslint-plugin-next to address 1 CVE. Fixed in 15.5.25-tuxcare.3.
- Record
CLSA-2026-1792196897- Updated
- 2026-11-02
OSVCLSA-2026-1792206283 No score
TuxCare security update for @next/bundle-analyzer (2 CVEs)
TuxCare rebuilt @next/bundle-analyzer to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.
- Record
CLSA-2026-1792206283- Updated
- 2026-11-02
OSVCLSA-2026-1792206284 No score
TuxCare security update for @next/bundle-analyzer (1 CVE)
TuxCare rebuilt @next/bundle-analyzer to address 1 CVE. Fixed in 15.5.26-tuxcare.2.
- Record
CLSA-2026-1792206284- Updated
- 2026-11-02
OSVCLSA-2026-1792206285 No score
TuxCare security update for @next/bundle-analyzer (2 CVEs)
TuxCare rebuilt @next/bundle-analyzer to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.
- Record
CLSA-2026-1792206285- Updated
- 2026-11-02
OSVCLSA-2026-1792206293 No score
TuxCare security update for @next/bundle-analyzer (5 CVEs)
TuxCare rebuilt @next/bundle-analyzer to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.
- Record
CLSA-2026-1792206293- Updated
- 2026-11-02
OSVCLSA-2026-1792206332 No score
TuxCare security update for @next/bundle-analyzer (1 CVE)
TuxCare rebuilt @next/bundle-analyzer to address 1 CVE. Fixed in 15.5.25-tuxcare.3.
- Record
CLSA-2026-1792206332- Updated
- 2026-11-02
OSVCLSA-2026-1792256960 No score
TuxCare security update for next-rspack (2 CVEs)
TuxCare rebuilt next-rspack to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.
- Record
CLSA-2026-1792256960- Updated
- 2026-11-02
OSVCLSA-2026-1792256961 No score
TuxCare security update for next-rspack (1 CVE)
TuxCare rebuilt next-rspack to address 1 CVE. Fixed in 15.5.26-tuxcare.2.
- Record
CLSA-2026-1792256961- Updated
- 2026-11-02
OSVCLSA-2026-1792256962 No score
TuxCare security update for next-rspack (2 CVEs)
TuxCare rebuilt next-rspack to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.
- Record
CLSA-2026-1792256962- Updated
- 2026-11-02
OSVCLSA-2026-1792256968 No score
TuxCare security update for next-rspack (1 CVE)
TuxCare rebuilt next-rspack to address 1 CVE. Fixed in 15.5.25-tuxcare.3.
- Record
CLSA-2026-1792256968- Updated
- 2026-11-02
OSVCLSA-2026-1792256970 No score
TuxCare security update for next-rspack (5 CVEs)
TuxCare rebuilt next-rspack to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.
- Record
CLSA-2026-1792256970- Updated
- 2026-11-02
OSVCLSA-2026-1792272220 No score
TuxCare security update for @next/plugin-storybook (2 CVEs)
TuxCare rebuilt @next/plugin-storybook to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.
- Record
CLSA-2026-1792272220- Updated
- 2026-11-02
OSVCLSA-2026-1792272221 No score
TuxCare security update for @next/plugin-storybook (1 CVE)
TuxCare rebuilt @next/plugin-storybook to address 1 CVE. Fixed in 15.5.26-tuxcare.2.
- Record
CLSA-2026-1792272221- Updated
- 2026-11-02
OSVCLSA-2026-1792272222 No score
TuxCare security update for @next/plugin-storybook (2 CVEs)
TuxCare rebuilt @next/plugin-storybook to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.
- Record
CLSA-2026-1792272222- Updated
- 2026-11-02
OSVCLSA-2026-1792272234 No score
TuxCare security update for @next/plugin-storybook (5 CVEs)
TuxCare rebuilt @next/plugin-storybook to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.
- Record
CLSA-2026-1792272234- Updated
- 2026-11-02
OSVCLSA-2026-1792272254 No score
TuxCare security update for @next/plugin-storybook (1 CVE)
TuxCare rebuilt @next/plugin-storybook to address 1 CVE. Fixed in 15.5.25-tuxcare.3.
- Record
CLSA-2026-1792272254- Updated
- 2026-11-02
OSVCLSA-2026-1792292993 No score
TuxCare security update for @next/polyfill-module (2 CVEs)
TuxCare rebuilt @next/polyfill-module to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.
- Record
CLSA-2026-1792292993- Updated
- 2026-11-02
OSVCLSA-2026-1792292994 No score
TuxCare security update for @next/polyfill-module (1 CVE)
TuxCare rebuilt @next/polyfill-module to address 1 CVE. Fixed in 15.5.26-tuxcare.2.
- Record
CLSA-2026-1792292994- Updated
- 2026-11-02
OSVCLSA-2026-1792292995 No score
TuxCare security update for @next/polyfill-module (2 CVEs)
TuxCare rebuilt @next/polyfill-module to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.
- Record
CLSA-2026-1792292995- Updated
- 2026-11-02
OSVCLSA-2026-1792293004 No score
TuxCare security update for @next/polyfill-module (1 CVE)
TuxCare rebuilt @next/polyfill-module to address 1 CVE. Fixed in 15.5.25-tuxcare.3.
- Record
CLSA-2026-1792293004- Updated
- 2026-11-02
OSVCLSA-2026-1792293005 No score
TuxCare security update for @next/polyfill-module (5 CVEs)
TuxCare rebuilt @next/polyfill-module to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.
- Record
CLSA-2026-1792293005- Updated
- 2026-11-02
OSVCLSA-2026-1792304709 No score
TuxCare security update for @next/polyfill-nomodule (2 CVEs)
TuxCare rebuilt @next/polyfill-nomodule to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.
- Record
CLSA-2026-1792304709- Updated
- 2026-11-02
OSVCLSA-2026-1792304710 No score
TuxCare security update for @next/polyfill-nomodule (1 CVE)
TuxCare rebuilt @next/polyfill-nomodule to address 1 CVE. Fixed in 15.5.26-tuxcare.2.
- Record
CLSA-2026-1792304710- Updated
- 2026-11-02
OSVCLSA-2026-1792304711 No score
TuxCare security update for @next/polyfill-nomodule (2 CVEs)
TuxCare rebuilt @next/polyfill-nomodule to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.
- Record
CLSA-2026-1792304711- Updated
- 2026-11-02
OSVCLSA-2026-1792304725 No score
TuxCare security update for @next/polyfill-nomodule (5 CVEs)
TuxCare rebuilt @next/polyfill-nomodule to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.
- Record
CLSA-2026-1792304725- Updated
- 2026-11-02
OSVCLSA-2026-1792304748 No score
TuxCare security update for @next/polyfill-nomodule (1 CVE)
TuxCare rebuilt @next/polyfill-nomodule to address 1 CVE. Fixed in 15.5.25-tuxcare.3.
- Record
CLSA-2026-1792304748- Updated
- 2026-11-02
OSVCLSA-2026-1792326288 No score
TuxCare security update for @next/react-refresh-utils (2 CVEs)
TuxCare rebuilt @next/react-refresh-utils to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.
- Record
CLSA-2026-1792326288- Updated
- 2026-11-02
OSVCLSA-2026-1792326289 No score
TuxCare security update for @next/react-refresh-utils (1 CVE)
TuxCare rebuilt @next/react-refresh-utils to address 1 CVE. Fixed in 15.5.26-tuxcare.2.
- Record
CLSA-2026-1792326289- Updated
- 2026-11-02
OSVCLSA-2026-1792326290 No score
TuxCare security update for @next/react-refresh-utils (2 CVEs)
TuxCare rebuilt @next/react-refresh-utils to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.
- Record
CLSA-2026-1792326290- Updated
- 2026-11-02
OSVCLSA-2026-1792326298 No score
TuxCare security update for @next/react-refresh-utils (5 CVEs)
TuxCare rebuilt @next/react-refresh-utils to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.
- Record
CLSA-2026-1792326298- Updated
- 2026-11-02
OSVCLSA-2026-1792326307 No score
TuxCare security update for @next/react-refresh-utils (1 CVE)
TuxCare rebuilt @next/react-refresh-utils to address 1 CVE. Fixed in 15.5.25-tuxcare.3.
- Record
CLSA-2026-1792326307- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nextnpm |
16.0.0 up to 16.3.8 | 16.3.8 |
nextnpm |
15.0.0 up to 15.5.27 | 15.5.27 |
nextnpm |
13.3.0 up to 14.2.34 | 14.2.34 |
nextnpm |
15.0.0-canary.0 up to 15.0.6 | 15.0.6 |
nextnpm |
15.1.1-canary.0 up to 15.1.10 | 15.1.10 |
nextnpm |
15.2.0-canary.0 up to 15.2.7 | 15.2.7 |
nextnpm |
15.3.0-canary.0 up to 15.3.7 | 15.3.7 |
nextnpm |
15.4.0-canary.0 up to 15.4.9 | 15.4.9 |
nextnpm |
15.5.1-canary.0 up to 15.5.8 | 15.5.8 |
nextnpm |
15.6.0-canary.0 up to 15.6.0-canary.59 | 15.6.0-canary.59 |
Show 75 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nextnpm |
16.0.0-beta.0 up to 16.0.9 | 16.0.9 |
nextnpm |
16.1.0-canary.0 up to 16.1.0-canary.17 | 16.1.0-canary.17 |
nextTuxCare:npm |
15.5.25-tuxcare.0 up to 15.5.25-tuxcare.3, plus listed versions 15.5.2515.5.25-tuxcare.115.5.25-tuxcare.2 |
15.5.25-tuxcare.3 |
nextTuxCare:npm From an advisory covering 5 CVEs |
16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions 16.0.616.0.6-tuxcare.116.0.6-tuxcare.1016.0.6-tuxcare.1116.0.6-tuxcare.12 Show 8 moreShow less16.0.6-tuxcare.216.0.6-tuxcare.316.0.6-tuxcare.416.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9 |
16.0.6-tuxcare.13 |
create-next-appTuxCare:npm From an advisory covering 2 CVEs |
15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions 15.5.2415.5.24-tuxcare.1 |
15.5.24-tuxcare.2 |
create-next-appTuxCare:npm |
15.5.26-tuxcare.0 up to 15.5.26-tuxcare.2, plus listed versions 15.5.2615.5.26-tuxcare.1 |
15.5.26-tuxcare.2 |
create-next-appTuxCare:npm From an advisory covering 2 CVEs |
15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions 15.5.2315.5.23-tuxcare.1 |
15.5.23-tuxcare.2 |
create-next-appTuxCare:npm From an advisory covering 5 CVEs |
16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions 16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4 Show 5 moreShow less16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9 |
16.0.6-tuxcare.13 |
create-next-appTuxCare:npm |
15.5.25-tuxcare.0 up to 15.5.25-tuxcare.3, plus listed versions 15.5.2515.5.25-tuxcare.115.5.25-tuxcare.2 |
15.5.25-tuxcare.3 |
@next/eslint-plugin-nextTuxCare:npm From an advisory covering 2 CVEs |
15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions 15.5.2415.5.24-tuxcare.1 |
15.5.24-tuxcare.2 |
@next/eslint-plugin-nextTuxCare:npm |
15.5.26-tuxcare.0 up to 15.5.26-tuxcare.2, plus listed versions 15.5.2615.5.26-tuxcare.1 |
15.5.26-tuxcare.2 |
@next/eslint-plugin-nextTuxCare:npm From an advisory covering 2 CVEs |
15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions 15.5.2315.5.23-tuxcare.1 |
15.5.23-tuxcare.2 |
@next/eslint-plugin-nextTuxCare:npm From an advisory covering 5 CVEs |
16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions 16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4 Show 5 moreShow less16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9 |
16.0.6-tuxcare.13 |
@next/eslint-plugin-nextTuxCare:npm |
15.5.25-tuxcare.0 up to 15.5.25-tuxcare.3, plus listed versions 15.5.2515.5.25-tuxcare.115.5.25-tuxcare.2 |
15.5.25-tuxcare.3 |
@next/bundle-analyzerTuxCare:npm From an advisory covering 2 CVEs |
15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions 15.5.2415.5.24-tuxcare.1 |
15.5.24-tuxcare.2 |
@next/bundle-analyzerTuxCare:npm |
15.5.26-tuxcare.0 up to 15.5.26-tuxcare.2, plus listed versions 15.5.2615.5.26-tuxcare.1 |
15.5.26-tuxcare.2 |
@next/bundle-analyzerTuxCare:npm From an advisory covering 2 CVEs |
15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions 15.5.2315.5.23-tuxcare.1 |
15.5.23-tuxcare.2 |
@next/bundle-analyzerTuxCare:npm From an advisory covering 5 CVEs |
16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions 16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4 Show 5 moreShow less16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9 |
16.0.6-tuxcare.13 |
@next/bundle-analyzerTuxCare:npm |
15.5.25-tuxcare.0 up to 15.5.25-tuxcare.3, plus listed versions 15.5.2515.5.25-tuxcare.115.5.25-tuxcare.2 |
15.5.25-tuxcare.3 |
next-rspackTuxCare:npm From an advisory covering 2 CVEs |
15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions 15.5.2415.5.24-tuxcare.1 |
15.5.24-tuxcare.2 |
next-rspackTuxCare:npm |
15.5.26-tuxcare.0 up to 15.5.26-tuxcare.2, plus listed versions 15.5.2615.5.26-tuxcare.1 |
15.5.26-tuxcare.2 |
next-rspackTuxCare:npm From an advisory covering 2 CVEs |
15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions 15.5.2315.5.23-tuxcare.1 |
15.5.23-tuxcare.2 |
next-rspackTuxCare:npm |
15.5.25-tuxcare.0 up to 15.5.25-tuxcare.3, plus listed versions 15.5.2515.5.25-tuxcare.115.5.25-tuxcare.2 |
15.5.25-tuxcare.3 |
next-rspackTuxCare:npm From an advisory covering 5 CVEs |
16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions 16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4 Show 5 moreShow less16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9 |
16.0.6-tuxcare.13 |
@next/plugin-storybookTuxCare:npm From an advisory covering 2 CVEs |
15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions 15.5.2415.5.24-tuxcare.1 |
15.5.24-tuxcare.2 |
@next/plugin-storybookTuxCare:npm |
15.5.26-tuxcare.0 up to 15.5.26-tuxcare.2, plus listed versions 15.5.2615.5.26-tuxcare.1 |
15.5.26-tuxcare.2 |
@next/plugin-storybookTuxCare:npm From an advisory covering 2 CVEs |
15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions 15.5.2315.5.23-tuxcare.1 |
15.5.23-tuxcare.2 |
@next/plugin-storybookTuxCare:npm From an advisory covering 5 CVEs |
16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions 16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4 Show 5 moreShow less16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9 |
16.0.6-tuxcare.13 |
@next/plugin-storybookTuxCare:npm |
15.5.25-tuxcare.0 up to 15.5.25-tuxcare.3, plus listed versions 15.5.2515.5.25-tuxcare.115.5.25-tuxcare.2 |
15.5.25-tuxcare.3 |
@next/polyfill-moduleTuxCare:npm From an advisory covering 2 CVEs |
15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions 15.5.2415.5.24-tuxcare.1 |
15.5.24-tuxcare.2 |
@next/polyfill-moduleTuxCare:npm |
15.5.26-tuxcare.0 up to 15.5.26-tuxcare.2, plus listed versions 15.5.2615.5.26-tuxcare.1 |
15.5.26-tuxcare.2 |
@next/polyfill-moduleTuxCare:npm From an advisory covering 2 CVEs |
15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions 15.5.2315.5.23-tuxcare.1 |
15.5.23-tuxcare.2 |
@next/polyfill-moduleTuxCare:npm |
15.5.25-tuxcare.0 up to 15.5.25-tuxcare.3, plus listed versions 15.5.2515.5.25-tuxcare.115.5.25-tuxcare.2 |
15.5.25-tuxcare.3 |
@next/polyfill-moduleTuxCare:npm From an advisory covering 5 CVEs |
16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions 16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4 Show 5 moreShow less16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9 |
16.0.6-tuxcare.13 |
@next/polyfill-nomoduleTuxCare:npm From an advisory covering 2 CVEs |
15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions 15.5.2415.5.24-tuxcare.1 |
15.5.24-tuxcare.2 |
@next/polyfill-nomoduleTuxCare:npm |
15.5.26-tuxcare.0 up to 15.5.26-tuxcare.2, plus listed versions 15.5.2615.5.26-tuxcare.1 |
15.5.26-tuxcare.2 |
@next/polyfill-nomoduleTuxCare:npm From an advisory covering 2 CVEs |
15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions 15.5.2315.5.23-tuxcare.1 |
15.5.23-tuxcare.2 |
@next/polyfill-nomoduleTuxCare:npm From an advisory covering 5 CVEs |
16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions 16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4 Show 5 moreShow less16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9 |
16.0.6-tuxcare.13 |
@next/polyfill-nomoduleTuxCare:npm |
15.5.25-tuxcare.0 up to 15.5.25-tuxcare.3, plus listed versions 15.5.2515.5.25-tuxcare.115.5.25-tuxcare.2 |
15.5.25-tuxcare.3 |
@next/react-refresh-utilsTuxCare:npm From an advisory covering 2 CVEs |
15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions 15.5.2415.5.24-tuxcare.1 |
15.5.24-tuxcare.2 |
@next/react-refresh-utilsTuxCare:npm |
15.5.26-tuxcare.0 up to 15.5.26-tuxcare.2, plus listed versions 15.5.2615.5.26-tuxcare.1 |
15.5.26-tuxcare.2 |
@next/react-refresh-utilsTuxCare:npm From an advisory covering 2 CVEs |
15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions 15.5.2315.5.23-tuxcare.1 |
15.5.23-tuxcare.2 |
@next/react-refresh-utilsTuxCare:npm From an advisory covering 5 CVEs |
16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions 16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4 Show 5 moreShow less16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9 |
16.0.6-tuxcare.13 |
@next/react-refresh-utilsTuxCare:npm |
15.5.25-tuxcare.0 up to 15.5.25-tuxcare.3, plus listed versions 15.5.2515.5.25-tuxcare.115.5.25-tuxcare.2 |
15.5.25-tuxcare.3 |
@next/third-partiesTuxCare:npm From an advisory covering 2 CVEs |
15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions 15.5.2415.5.24-tuxcare.1 |
15.5.24-tuxcare.2 |
@next/third-partiesTuxCare:npm From an advisory covering 2 CVEs |
15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions 15.5.2315.5.23-tuxcare.1 |
15.5.23-tuxcare.2 |
@next/third-partiesTuxCare:npm |
15.5.26-tuxcare.0 up to 15.5.26-tuxcare.2, plus listed versions 15.5.2615.5.26-tuxcare.1 |
15.5.26-tuxcare.2 |
@next/third-partiesTuxCare:npm |
15.5.25-tuxcare.0 up to 15.5.25-tuxcare.3, plus listed versions 15.5.2515.5.25-tuxcare.115.5.25-tuxcare.2 |
15.5.25-tuxcare.3 |
@next/third-partiesTuxCare:npm From an advisory covering 5 CVEs |
16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions 16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4 Show 5 moreShow less16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9 |
16.0.6-tuxcare.13 |
@next/swc-linux-x64-gnuTuxCare:npm From an advisory covering 2 CVEs |
15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions 15.5.2415.5.24-tuxcare.1 |
15.5.24-tuxcare.2 |
@next/swc-linux-x64-gnuTuxCare:npm |
15.5.26-tuxcare.0 up to 15.5.26-tuxcare.2, plus listed versions 15.5.2615.5.26-tuxcare.1 |
15.5.26-tuxcare.2 |
@next/swc-linux-x64-gnuTuxCare:npm From an advisory covering 2 CVEs |
15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions 15.5.2315.5.23-tuxcare.1 |
15.5.23-tuxcare.2 |
@next/swc-linux-x64-gnuTuxCare:npm |
15.5.25-tuxcare.0 up to 15.5.25-tuxcare.3, plus listed versions 15.5.2515.5.25-tuxcare.115.5.25-tuxcare.2 |
15.5.25-tuxcare.3 |
@next/swc-linux-x64-gnuTuxCare:npm From an advisory covering 5 CVEs |
16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions 16.0.616.0.6-tuxcare.1016.0.6-tuxcare.316.0.6-tuxcare.416.0.6-tuxcare.5 Show 4 moreShow less16.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9 |
16.0.6-tuxcare.13 |
@next/swc-linux-x64-gnuTuxCare:npm From an advisory covering 7 CVEs |
15.1.2-tuxcare.0 up to 15.1.2-tuxcare.3, plus listed versions 15.1.215.1.2-tuxcare.115.1.2-tuxcare.2 |
15.1.2-tuxcare.3 |
@next/codemodTuxCare:npm |
15.5.26-tuxcare.0 up to 15.5.26-tuxcare.2, plus listed versions 15.5.2615.5.26-tuxcare.1 |
15.5.26-tuxcare.2 |
@next/codemodTuxCare:npm From an advisory covering 2 CVEs |
15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions 15.5.2415.5.24-tuxcare.1 |
15.5.24-tuxcare.2 |
@next/codemodTuxCare:npm From an advisory covering 2 CVEs |
15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions 15.5.2315.5.23-tuxcare.1 |
15.5.23-tuxcare.2 |
@next/codemodTuxCare:npm |
15.5.25-tuxcare.0 up to 15.5.25-tuxcare.3, plus listed versions 15.5.2515.5.25-tuxcare.115.5.25-tuxcare.2 |
15.5.25-tuxcare.3 |
@next/codemodTuxCare:npm From an advisory covering 5 CVEs |
16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions 16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4 Show 5 moreShow less16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9 |
16.0.6-tuxcare.13 |
@next/mdxTuxCare:npm From an advisory covering 2 CVEs |
15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions 15.5.2415.5.24-tuxcare.1 |
15.5.24-tuxcare.2 |
@next/mdxTuxCare:npm |
15.5.26-tuxcare.0 up to 15.5.26-tuxcare.2, plus listed versions 15.5.2615.5.26-tuxcare.1 |
15.5.26-tuxcare.2 |
@next/mdxTuxCare:npm From an advisory covering 2 CVEs |
15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions 15.5.2315.5.23-tuxcare.1 |
15.5.23-tuxcare.2 |
@next/mdxTuxCare:npm From an advisory covering 5 CVEs |
16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions 16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4 Show 5 moreShow less16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9 |
16.0.6-tuxcare.13 |
@next/mdxTuxCare:npm |
15.5.25-tuxcare.0 up to 15.5.25-tuxcare.3, plus listed versions 15.5.2515.5.25-tuxcare.115.5.25-tuxcare.2 |
15.5.25-tuxcare.3 |
@next/swc-linux-arm64-gnuTuxCare:npm From an advisory covering 2 CVEs |
15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions 15.5.2415.5.24-tuxcare.1 |
15.5.24-tuxcare.2 |
@next/swc-linux-arm64-gnuTuxCare:npm |
15.5.26-tuxcare.0 up to 15.5.26-tuxcare.2, plus listed versions 15.5.2615.5.26-tuxcare.1 |
15.5.26-tuxcare.2 |
@next/swc-linux-arm64-gnuTuxCare:npm From an advisory covering 2 CVEs |
15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions 15.5.2315.5.23-tuxcare.1 |
15.5.23-tuxcare.2 |
@next/swc-linux-arm64-gnuTuxCare:npm From an advisory covering 7 CVEs |
15.1.2-tuxcare.0 up to 15.1.2-tuxcare.3, plus listed versions 15.1.215.1.2-tuxcare.115.1.2-tuxcare.2 |
15.1.2-tuxcare.3 |
@next/swc-linux-arm64-gnuTuxCare:npm From an advisory covering 5 CVEs |
16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions 16.0.616.0.6-tuxcare.1016.0.6-tuxcare.316.0.6-tuxcare.416.0.6-tuxcare.5 Show 4 moreShow less16.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9 |
16.0.6-tuxcare.13 |
@next/swc-linux-arm64-gnuTuxCare:npm |
15.5.25-tuxcare.0 up to 15.5.25-tuxcare.3, plus listed versions 15.5.2515.5.25-tuxcare.115.5.25-tuxcare.2 |
15.5.25-tuxcare.3 |
nextRoot:npm |
before 15.5.27-aikido.1 | 15.5.27-aikido.116.3.8-aikido.115.5.27-aikido.2 |
@rootio/nextRoot:npm |
before 15.5.27-root.io.1 | 15.5.27-root.io.116.3.8-root.io.115.5.27-root.io.2 |
nextRoot:npm |
before 14.2.33-aikido.2 | 14.2.33-aikido.214.2.32-aikido.414.2.30-aikido.714.2.26-aikido.614.2.26-aikido.414.2.30-aikido.1013.4.19-aikido.613.4.19-aikido.714.2.10-aikido.314.2.13-aikido.314.2.3-aikido.114.2.15-aikido.414.0.4-aikido.914.1.3-aikido.214.2.25-aikido.214.1.0-aikido.414.2.18-aikido.213.3.0-aikido.514.2.15-aikido.313.4.19-aikido.314.1.0-aikido.714.1.0-aikido.814.2.13-aikido.114.2.3-aikido.514.2.0-aikido.214.0.3-aikido.314.2.5-aikido.914.2.5-aikido.1014.2.2-aikido.714.2.33-aikido.114.1.3-aikido.514.2.29-aikido.114.2.29-aikido.514.2.31-aikido.214.2.18-aikido.114.0.0-aikido.714.2.10-aikido.414.2.13-aikido.414.2.10-aikido.214.2.18-aikido.614.2.21-aikido.614.2.16-aikido.614.2.25-aikido.114.2.0-aikido.614.2.31-aikido.514.2.0-aikido.514.2.2-aikido.914.2.30-aikido.814.2.24-aikido.714.0.3-aikido.614.2.32-aikido.514.2.33-aikido.314.0.0-aikido.514.2.3-aikido.313.5.4-aikido.514.1.3-aikido.613.3.0-aikido.614.0.3-aikido.414.2.13-aikido.214.2.21-aikido.414.0.0-aikido.314.1.4-aikido.714.2.21-aikido.213.3.0-aikido.214.2.16-aikido.214.2.16-aikido.413.5.4-aikido.213.3.0-aikido.714.2.33-aikido.414.2.26-aikido.314.0.3-aikido.514.2.30-aikido.914.1.4-aikido.814.2.32-aikido.613.5.4-aikido.614.1.3-aikido.714.2.16-aikido.514.0.0-aikido.614.2.21-aikido.514.2.3-aikido.414.2.2-aikido.813.4.19-aikido.414.2.15-aikido.514.2.3-aikido.213.5.6-aikido.414.2.28-aikido.514.2.32-aikido.214.1.4-aikido.914.1.3-aikido.113.3.0-aikido.314.2.32-aikido.713.5.6-aikido.514.2.15-aikido.614.1.3-aikido.814.2.32-aikido.814.2.29-aikido.414.2.28-aikido.114.2.33-aikido.513.5.6-aikido.614.2.26-aikido.514.2.28-aikido.214.2.26-aikido.214.0.4-aikido.814.2.28-aikido.314.1.0-aikido.214.2.31-aikido.314.2.24-aikido.614.1.4-aikido.614.2.18-aikido.313.3.0-aikido.414.1.0-aikido.514.2.16-aikido.314.0.0-aikido.414.1.0-aikido.314.2.18-aikido.413.5.4-aikido.314.2.31-aikido.114.2.0-aikido.313.4.19-aikido.514.2.31-aikido.414.2.29-aikido.214.2.0-aikido.113.5.4-aikido.414.2.21-aikido.114.2.16-aikido.114.1.3-aikido.313.3.0-aikido.814.2.21-aikido.314.2.32-aikido.314.2.29-aikido.313.5.11-aikido.914.1.3-aikido.414.2.0-aikido.414.2.30-aikido.614.2.28-aikido.414.2.33-aikido.614.1.0-aikido.614.2.18-aikido.513.5.6-aikido.7 |
@rootio/nextRoot:npm |
before 14.2.33-root.io.2 | 14.2.33-root.io.214.2.32-root.io.414.2.30-root.io.714.2.26-root.io.614.2.26-root.io.414.2.30-root.io.1013.4.19-root.io.613.4.19-root.io.714.2.10-root.io.314.2.13-root.io.314.2.3-root.io.114.2.15-root.io.414.0.4-root.io.914.1.3-root.io.214.2.25-root.io.214.1.0-root.io.414.2.18-root.io.213.3.0-root.io.514.2.15-root.io.313.4.19-root.io.314.1.0-root.io.714.1.0-root.io.814.2.13-root.io.114.2.3-root.io.514.2.0-root.io.214.0.3-root.io.314.2.5-root.io.914.2.5-root.io.1014.2.2-root.io.714.2.33-root.io.114.1.3-root.io.514.2.29-root.io.114.2.29-root.io.514.2.31-root.io.214.2.18-root.io.114.0.0-root.io.714.2.10-root.io.414.2.13-root.io.414.2.10-root.io.214.2.18-root.io.614.2.21-root.io.614.2.16-root.io.614.2.25-root.io.114.2.0-root.io.614.2.31-root.io.514.2.0-root.io.514.2.2-root.io.914.2.30-root.io.814.2.24-root.io.714.0.3-root.io.614.2.32-root.io.514.2.33-root.io.314.0.0-root.io.514.2.3-root.io.313.5.4-root.io.514.1.3-root.io.613.3.0-root.io.614.0.3-root.io.414.2.13-root.io.214.2.21-root.io.414.0.0-root.io.314.1.4-root.io.714.2.21-root.io.213.3.0-root.io.214.2.16-root.io.214.2.16-root.io.413.5.4-root.io.213.3.0-root.io.714.2.33-root.io.414.2.26-root.io.314.0.3-root.io.514.2.30-root.io.914.1.4-root.io.814.2.32-root.io.613.5.4-root.io.614.1.3-root.io.714.2.16-root.io.514.0.0-root.io.614.2.21-root.io.514.2.3-root.io.414.2.2-root.io.813.4.19-root.io.414.2.15-root.io.514.2.3-root.io.213.5.6-root.io.414.2.28-root.io.514.2.32-root.io.214.1.4-root.io.914.1.3-root.io.113.3.0-root.io.314.2.32-root.io.713.5.6-root.io.514.2.15-root.io.614.1.3-root.io.814.2.32-root.io.814.2.29-root.io.414.2.28-root.io.114.2.33-root.io.513.5.6-root.io.614.2.26-root.io.514.2.28-root.io.214.2.26-root.io.214.0.4-root.io.814.2.28-root.io.314.2.24-root.io.614.1.0-root.io.214.2.31-root.io.314.1.4-root.io.614.2.18-root.io.313.3.0-root.io.414.1.0-root.io.514.2.16-root.io.314.0.0-root.io.414.1.0-root.io.314.2.18-root.io.413.5.4-root.io.314.2.31-root.io.114.2.0-root.io.313.4.19-root.io.514.2.31-root.io.414.2.29-root.io.214.2.0-root.io.113.5.4-root.io.414.2.21-root.io.114.1.3-root.io.314.2.16-root.io.113.3.0-root.io.814.2.21-root.io.314.2.32-root.io.314.2.29-root.io.313.5.11-root.io.914.1.3-root.io.414.2.0-root.io.414.2.30-root.io.614.2.33-root.io.614.2.28-root.io.414.1.0-root.io.613.5.6-root.io.714.2.18-root.io.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-94484 is a medium vulnerability (CVSS 6.3) in Vercel Next.js, published December 11, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in next 16.3.8.
References
github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p
github.com/vercel/next.js/commit/52c94abdd2ea5f416f5e8353ea8a2edd3fe311b8
github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52
github.com/vercel/next.js/releases/tag/v15.5.27
github.com/vercel/next.js/releases/tag/v16.3.8
nvd.nist.gov/vuln/detail/CVE-2026-94484
Show 10 moreShow less
github.com/advisories/GHSA-mcj8-r9mp-w47p
github.com/vercel/next.js/security/advisories/GHSA-mwv6-3258-q52c
nextjs.org/blog/security-update-2025-12-11
cve.org/CVERecord?id=CVE-2025-55184
github.com/advisories/GHSA-mwv6-3258-q52c
github.com/vercel/next.js/security/advisories/GHSA-w37m-7fhw-fmv9
cve.org/CVERecord?id=CVE-2025-55183
github.com/advisories/GHSA-w37m-7fhw-fmv9
github.com/CVEProject/cvelistV5/tree/main/cves/2026/94xxx/CVE-2026-94484.json
github.com/vercel/next.js
Left out on purpose, here and in the API, to keep responses small: 29 source records.