Every CVE Search/ Get API key

CVE-2026-94543

Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

6.3 MediumFix available

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache entry without sufficiently binding it to the source route. A request can replace one page's cache entry with content from a different route, causing the affected page to serve incorrect content to every visitor until revalidation. Applications deployed on Vercel are not affected. This issue is fixed in versions 15.5.27 and 16.3.8.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.51%Up 0.2 points since Oct 3, 2026
90%50%10%1%

What each source reports

CVE List Score used 6.3

Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache entry without sufficiently binding it to the source route. A request can replace one page's cache entry with content from a different route, causing the affected page to serve incorrect content to every visitor until revalidation. Applications deployed on Vercel are not affected. This issue is fixed in versions 15.5.27 and 16.3.8.

Record
CVE-2026-94543
CVSS 4.0
6.3 MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Weakness
CWE-524
Updated
2026-11-02
EUVDEUVD-2026-91670 6.3

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache entry without sufficiently binding it to the source route. A request can replace one page's cache entry with content from a different route, causing the affected page to serve incorrect content to every visitor until revalidation. Applications deployed on Vercel are not affected. This issue is fixed in versions 15.5.27 and 16.3.8.

Record
EUVD-2026-91670
CVSS 4.0
6.3 MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-4jqv-mc3x-m676 6.3

Next.js has cache poisoning of SSG and ISR pages in self-hosted applications

Self-hosted Next.js applications that use the Pages Router with statically generated (SSG) or incrementally regenerated (ISR) pages can have a page's cache entry replaced with content from a different route, causing the affected page to serve wrong content to every visitor until the entry is revalidated. Applications deployed on Vercel are not affected.

Record
GHSA-4jqv-mc3x-m676
CVSS 4.0
6.3 MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-524
Updated
2026-11-02
GitHub AdvisoriesGHSA-mwv6-3258-q52c 7.5

Next Vulnerable to Denial of Service with Server Components

A vulnerability affects certain React packages for versions 19.0.0, 19.0.1, 19.1.0, 19.1.1, 19.1.2, 19.2.0, and 19.2.1 and frameworks that use the affected packages, including Next.js 15.x and 16.x using the App Router. The issue is tracked upstream as CVE-2025-55184.

A malicious HTTP request can be crafted and sent to any App Router endpoint that, when deserialized, can cause the server process to hang and consume CPU. This can result in denial of service in unpatched environments.

Record
GHSA-mwv6-3258-q52c
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-502, CWE-1395
Updated
2026-11-02
GitHub AdvisoriesGHSA-w37m-7fhw-fmv9 5.3

Next Server Actions Source Code Exposure

A vulnerability affects certain React packages for versions 19.0.0, 19.0.1, 19.1.0, 19.1.1, 19.1.2, 19.2.0, and 19.2.1 and frameworks that use the affected packages, including Next.js 15.x and 16.x using the App Router. The issue is tracked upstream as CVE-2025-55183.

A malicious HTTP request can be crafted and sent to any App Router endpoint that can return the compiled source code of Server Functions. This could reveal business logic, but would not expose secrets unless they were hardcoded directly into Server Function code.

Record
GHSA-w37m-7fhw-fmv9
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-497, CWE-502, CWE-1395
Updated
2026-11-02
NVD 6.3

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache entry without sufficiently binding it to the source route. A request can replace one page's cache entry with content from a different route, causing the affected page to serve incorrect content to every visitor until revalidation. Applications deployed on Vercel are not affected. This issue is fixed in versions 15.5.27 and 16.3.8.

Record
CVE-2026-94543
CVSS 4.0
6.3 MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-524
Updated
2026-11-02
Show 50 moreShow less
OSV 6.3

Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache entry without sufficiently binding it to the source route. A request can replace one page's cache entry with content from a different route, causing the affected page to serve incorrect content to every visitor until revalidation. Applications deployed on Vercel are not affected. This issue is fixed in versions 15.5.27 and 16.3.8.

Record
CVE-2026-94543
CVSS 4.0
6.3 MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Weakness
CWE-524
Updated
2026-11-02
OSVGHSA-4jqv-mc3x-m676 6.3

Next.js has cache poisoning of SSG and ISR pages in self-hosted applications

Self-hosted Next.js applications that use the Pages Router with statically generated (SSG) or incrementally regenerated (ISR) pages can have a page's cache entry replaced with content from a different route, causing the affected page to serve wrong content to every visitor until the entry is revalidated. Applications deployed on Vercel are not affected.

Record
GHSA-4jqv-mc3x-m676
CVSS 4.0
6.3 MediumCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-524
Updated
2026-11-02
OSVGHSA-mwv6-3258-q52c 7.5

Next Vulnerable to Denial of Service with Server Components

A vulnerability affects certain React packages for versions 19.0.0, 19.0.1, 19.1.0, 19.1.1, 19.1.2, 19.2.0, and 19.2.1 and frameworks that use the affected packages, including Next.js 15.x and 16.x using the App Router. The issue is tracked upstream as CVE-2025-55184.

A malicious HTTP request can be crafted and sent to any App Router endpoint that, when deserialized, can cause the server process to hang and consume CPU. This can result in denial of service in unpatched environments.

Record
GHSA-mwv6-3258-q52c
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1395, CWE-400, CWE-502
Updated
2026-11-02
OSVGHSA-w37m-7fhw-fmv9 5.3

Next Server Actions Source Code Exposure

A vulnerability affects certain React packages for versions 19.0.0, 19.0.1, 19.1.0, 19.1.1, 19.1.2, 19.2.0, and 19.2.1 and frameworks that use the affected packages, including Next.js 15.x and 16.x using the App Router. The issue is tracked upstream as CVE-2025-55183.

A malicious HTTP request can be crafted and sent to any App Router endpoint that can return the compiled source code of Server Functions. This could reveal business logic, but would not expose secrets unless they were hardcoded directly into Server Function code.

Record
GHSA-w37m-7fhw-fmv9
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-1395, CWE-497, CWE-502
Updated
2026-11-02
OSVCLSA-2026-1791628798 No score

TuxCare security update for 21 packages (1 CVE)

TuxCare rebuilt 21 packages to address 1 CVE. Fixed in 15.5.25-tuxcare.2.

Record
CLSA-2026-1791628798
Updated
2026-11-02
OSVCLSA-2026-1791684070 No score

TuxCare security update for 21 packages (2 CVEs)

TuxCare rebuilt 21 packages to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.

Record
CLSA-2026-1791684070
Updated
2026-11-02
OSVCLSA-2026-1791686070 No score

TuxCare security update for 21 packages (2 CVEs)

TuxCare rebuilt 21 packages to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.

Record
CLSA-2026-1791686070
Updated
2026-11-02
OSVCLSA-2026-1791901908 No score

TuxCare security update for 9 packages (10 CVEs)

TuxCare rebuilt 9 packages to address 10 CVEs. Fixed in 15.1.2-tuxcare.3.

Record
CLSA-2026-1791901908
Updated
2026-11-02
OSVCLSA-2026-1791978826 No score

TuxCare security update for next (5 CVEs)

TuxCare rebuilt next to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.

Record
CLSA-2026-1791978826
Updated
2026-11-02
OSVCLSA-2026-1792195721 No score

TuxCare security update for create-next-app (1 CVE)

TuxCare rebuilt create-next-app to address 1 CVE. Fixed in 15.5.25-tuxcare.2.

Record
CLSA-2026-1792195721
Updated
2026-11-02
OSVCLSA-2026-1792195722 No score

TuxCare security update for create-next-app (2 CVEs)

TuxCare rebuilt create-next-app to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.

Record
CLSA-2026-1792195722
Updated
2026-11-02
OSVCLSA-2026-1792195724 No score

TuxCare security update for create-next-app (2 CVEs)

TuxCare rebuilt create-next-app to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.

Record
CLSA-2026-1792195724
Updated
2026-11-02
OSVCLSA-2026-1792195752 No score

TuxCare security update for create-next-app (5 CVEs)

TuxCare rebuilt create-next-app to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.

Record
CLSA-2026-1792195752
Updated
2026-11-02
OSVCLSA-2026-1792196714 No score

TuxCare security update for @next/eslint-plugin-next (1 CVE)

TuxCare rebuilt @next/eslint-plugin-next to address 1 CVE. Fixed in 15.5.25-tuxcare.2.

Record
CLSA-2026-1792196714
Updated
2026-11-02
OSVCLSA-2026-1792196715 No score

TuxCare security update for @next/eslint-plugin-next (2 CVEs)

TuxCare rebuilt @next/eslint-plugin-next to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.

Record
CLSA-2026-1792196715
Updated
2026-11-02
OSVCLSA-2026-1792196717 No score

TuxCare security update for @next/eslint-plugin-next (2 CVEs)

TuxCare rebuilt @next/eslint-plugin-next to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.

Record
CLSA-2026-1792196717
Updated
2026-11-02
OSVCLSA-2026-1792196732 No score

TuxCare security update for @next/eslint-plugin-next (5 CVEs)

TuxCare rebuilt @next/eslint-plugin-next to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.

Record
CLSA-2026-1792196732
Updated
2026-11-02
OSVCLSA-2026-1792206282 No score

TuxCare security update for @next/bundle-analyzer (1 CVE)

TuxCare rebuilt @next/bundle-analyzer to address 1 CVE. Fixed in 15.5.25-tuxcare.2.

Record
CLSA-2026-1792206282
Updated
2026-11-02
OSVCLSA-2026-1792206283 No score

TuxCare security update for @next/bundle-analyzer (2 CVEs)

TuxCare rebuilt @next/bundle-analyzer to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.

Record
CLSA-2026-1792206283
Updated
2026-11-02
OSVCLSA-2026-1792206285 No score

TuxCare security update for @next/bundle-analyzer (2 CVEs)

TuxCare rebuilt @next/bundle-analyzer to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.

Record
CLSA-2026-1792206285
Updated
2026-11-02
OSVCLSA-2026-1792206293 No score

TuxCare security update for @next/bundle-analyzer (5 CVEs)

TuxCare rebuilt @next/bundle-analyzer to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.

Record
CLSA-2026-1792206293
Updated
2026-11-02
OSVCLSA-2026-1792256959 No score

TuxCare security update for next-rspack (1 CVE)

TuxCare rebuilt next-rspack to address 1 CVE. Fixed in 15.5.25-tuxcare.2.

Record
CLSA-2026-1792256959
Updated
2026-11-02
OSVCLSA-2026-1792256960 No score

TuxCare security update for next-rspack (2 CVEs)

TuxCare rebuilt next-rspack to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.

Record
CLSA-2026-1792256960
Updated
2026-11-02
OSVCLSA-2026-1792256962 No score

TuxCare security update for next-rspack (2 CVEs)

TuxCare rebuilt next-rspack to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.

Record
CLSA-2026-1792256962
Updated
2026-11-02
OSVCLSA-2026-1792256970 No score

TuxCare security update for next-rspack (5 CVEs)

TuxCare rebuilt next-rspack to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.

Record
CLSA-2026-1792256970
Updated
2026-11-02
OSVCLSA-2026-1792272219 No score

TuxCare security update for @next/plugin-storybook (1 CVE)

TuxCare rebuilt @next/plugin-storybook to address 1 CVE. Fixed in 15.5.25-tuxcare.2.

Record
CLSA-2026-1792272219
Updated
2026-11-02
OSVCLSA-2026-1792272220 No score

TuxCare security update for @next/plugin-storybook (2 CVEs)

TuxCare rebuilt @next/plugin-storybook to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.

Record
CLSA-2026-1792272220
Updated
2026-11-02
OSVCLSA-2026-1792272222 No score

TuxCare security update for @next/plugin-storybook (2 CVEs)

TuxCare rebuilt @next/plugin-storybook to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.

Record
CLSA-2026-1792272222
Updated
2026-11-02
OSVCLSA-2026-1792272234 No score

TuxCare security update for @next/plugin-storybook (5 CVEs)

TuxCare rebuilt @next/plugin-storybook to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.

Record
CLSA-2026-1792272234
Updated
2026-11-02
OSVCLSA-2026-1792292992 No score

TuxCare security update for @next/polyfill-module (1 CVE)

TuxCare rebuilt @next/polyfill-module to address 1 CVE. Fixed in 15.5.25-tuxcare.2.

Record
CLSA-2026-1792292992
Updated
2026-11-02
OSVCLSA-2026-1792292993 No score

TuxCare security update for @next/polyfill-module (2 CVEs)

TuxCare rebuilt @next/polyfill-module to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.

Record
CLSA-2026-1792292993
Updated
2026-11-02
OSVCLSA-2026-1792292995 No score

TuxCare security update for @next/polyfill-module (2 CVEs)

TuxCare rebuilt @next/polyfill-module to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.

Record
CLSA-2026-1792292995
Updated
2026-11-02
OSVCLSA-2026-1792293005 No score

TuxCare security update for @next/polyfill-module (5 CVEs)

TuxCare rebuilt @next/polyfill-module to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.

Record
CLSA-2026-1792293005
Updated
2026-11-02
OSVCLSA-2026-1792304708 No score

TuxCare security update for @next/polyfill-nomodule (1 CVE)

TuxCare rebuilt @next/polyfill-nomodule to address 1 CVE. Fixed in 15.5.25-tuxcare.2.

Record
CLSA-2026-1792304708
Updated
2026-11-02
OSVCLSA-2026-1792304709 No score

TuxCare security update for @next/polyfill-nomodule (2 CVEs)

TuxCare rebuilt @next/polyfill-nomodule to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.

Record
CLSA-2026-1792304709
Updated
2026-11-02
OSVCLSA-2026-1792304711 No score

TuxCare security update for @next/polyfill-nomodule (2 CVEs)

TuxCare rebuilt @next/polyfill-nomodule to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.

Record
CLSA-2026-1792304711
Updated
2026-11-02
OSVCLSA-2026-1792304725 No score

TuxCare security update for @next/polyfill-nomodule (5 CVEs)

TuxCare rebuilt @next/polyfill-nomodule to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.

Record
CLSA-2026-1792304725
Updated
2026-11-02
OSVCLSA-2026-1792326287 No score

TuxCare security update for @next/react-refresh-utils (1 CVE)

TuxCare rebuilt @next/react-refresh-utils to address 1 CVE. Fixed in 15.5.25-tuxcare.2.

Record
CLSA-2026-1792326287
Updated
2026-11-02
OSVCLSA-2026-1792326288 No score

TuxCare security update for @next/react-refresh-utils (2 CVEs)

TuxCare rebuilt @next/react-refresh-utils to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.

Record
CLSA-2026-1792326288
Updated
2026-11-02
OSVCLSA-2026-1792326290 No score

TuxCare security update for @next/react-refresh-utils (2 CVEs)

TuxCare rebuilt @next/react-refresh-utils to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.

Record
CLSA-2026-1792326290
Updated
2026-11-02
OSVCLSA-2026-1792326298 No score

TuxCare security update for @next/react-refresh-utils (5 CVEs)

TuxCare rebuilt @next/react-refresh-utils to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.

Record
CLSA-2026-1792326298
Updated
2026-11-02
OSVCLSA-2026-1792338226 No score

TuxCare security update for @next/third-parties (1 CVE)

TuxCare rebuilt @next/third-parties to address 1 CVE. Fixed in 15.5.25-tuxcare.2.

Record
CLSA-2026-1792338226
Updated
2026-11-02
OSVCLSA-2026-1792338227 No score

TuxCare security update for @next/third-parties (2 CVEs)

TuxCare rebuilt @next/third-parties to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.

Record
CLSA-2026-1792338227
Updated
2026-11-02
OSVCLSA-2026-1792338228 No score

TuxCare security update for @next/third-parties (2 CVEs)

TuxCare rebuilt @next/third-parties to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.

Record
CLSA-2026-1792338228
Updated
2026-11-02
OSVCLSA-2026-1792338248 No score

TuxCare security update for @next/third-parties (5 CVEs)

TuxCare rebuilt @next/third-parties to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.

Record
CLSA-2026-1792338248
Updated
2026-11-02
OSVCLSA-2026-1792346463 No score

TuxCare security update for @next/swc-linux-x64-gnu (1 CVE)

TuxCare rebuilt @next/swc-linux-x64-gnu to address 1 CVE. Fixed in 15.5.25-tuxcare.2.

Record
CLSA-2026-1792346463
Updated
2026-11-02
OSVCLSA-2026-1792346464 No score

TuxCare security update for @next/swc-linux-x64-gnu (2 CVEs)

TuxCare rebuilt @next/swc-linux-x64-gnu to address 2 CVEs. Fixed in 15.5.24-tuxcare.2.

Record
CLSA-2026-1792346464
Updated
2026-11-02
OSVCLSA-2026-1792346466 No score

TuxCare security update for @next/swc-linux-x64-gnu (2 CVEs)

TuxCare rebuilt @next/swc-linux-x64-gnu to address 2 CVEs. Fixed in 15.5.23-tuxcare.2.

Record
CLSA-2026-1792346466
Updated
2026-11-02
OSVCLSA-2026-1792346474 No score

TuxCare security update for @next/swc-linux-x64-gnu (5 CVEs)

TuxCare rebuilt @next/swc-linux-x64-gnu to address 5 CVEs. Fixed in 16.0.6-tuxcare.13.

Record
CLSA-2026-1792346474
Updated
2026-11-02
OSVCLSA-2026-1792346492 No score

TuxCare security update for @next/swc-linux-x64-gnu (10 CVEs)

TuxCare rebuilt @next/swc-linux-x64-gnu to address 10 CVEs. Fixed in 15.1.2-tuxcare.3.

Record
CLSA-2026-1792346492
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
next
npm
 15.0.0 up to 15.5.27
15.5.27
next
npm
 16.0.0 up to 16.3.8
16.3.8
next
npm
 13.3.0 up to 14.2.34
14.2.34
next
npm
 15.0.0-canary.0 up to 15.0.6
15.0.6
next
npm
 15.1.1-canary.0 up to 15.1.10
15.1.10
next
npm
 15.2.0-canary.0 up to 15.2.7
15.2.7
next
npm
 15.3.0-canary.0 up to 15.3.7
15.3.7
next
npm
 15.4.0-canary.0 up to 15.4.9
15.4.9
next
npm
 15.5.1-canary.0 up to 15.5.8
15.5.8
next
npm
 15.6.0-canary.0 up to 15.6.0-canary.59
15.6.0-canary.59
Show 61 moreShow less
Affected packages
PackageAffectedFixed
next
npm
 16.0.0-beta.0 up to 16.0.9
16.0.9
next
npm
 16.1.0-canary.0 up to 16.1.0-canary.17
16.1.0-canary.17
next
TuxCare:npm
From an advisory covering 5 CVEs
 16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions
16.0.616.0.6-tuxcare.116.0.6-tuxcare.1016.0.6-tuxcare.1116.0.6-tuxcare.12
Show 8 moreShow less
16.0.6-tuxcare.216.0.6-tuxcare.316.0.6-tuxcare.416.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9
16.0.6-tuxcare.13
create-next-app
TuxCare:npm
 15.5.25-tuxcare.0 up to 15.5.25-tuxcare.2, plus listed versions
15.5.2515.5.25-tuxcare.1
15.5.25-tuxcare.2
create-next-app
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions
15.5.2415.5.24-tuxcare.1
15.5.24-tuxcare.2
create-next-app
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions
15.5.2315.5.23-tuxcare.1
15.5.23-tuxcare.2
create-next-app
TuxCare:npm
From an advisory covering 5 CVEs
 16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions
16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4
Show 5 moreShow less
16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9
16.0.6-tuxcare.13
@next/eslint-plugin-next
TuxCare:npm
 15.5.25-tuxcare.0 up to 15.5.25-tuxcare.2, plus listed versions
15.5.2515.5.25-tuxcare.1
15.5.25-tuxcare.2
@next/eslint-plugin-next
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions
15.5.2415.5.24-tuxcare.1
15.5.24-tuxcare.2
@next/eslint-plugin-next
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions
15.5.2315.5.23-tuxcare.1
15.5.23-tuxcare.2
@next/eslint-plugin-next
TuxCare:npm
From an advisory covering 5 CVEs
 16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions
16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4
Show 5 moreShow less
16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9
16.0.6-tuxcare.13
@next/bundle-analyzer
TuxCare:npm
 15.5.25-tuxcare.0 up to 15.5.25-tuxcare.2, plus listed versions
15.5.2515.5.25-tuxcare.1
15.5.25-tuxcare.2
@next/bundle-analyzer
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions
15.5.2415.5.24-tuxcare.1
15.5.24-tuxcare.2
@next/bundle-analyzer
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions
15.5.2315.5.23-tuxcare.1
15.5.23-tuxcare.2
@next/bundle-analyzer
TuxCare:npm
From an advisory covering 5 CVEs
 16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions
16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4
Show 5 moreShow less
16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9
16.0.6-tuxcare.13
next-rspack
TuxCare:npm
 15.5.25-tuxcare.0 up to 15.5.25-tuxcare.2, plus listed versions
15.5.2515.5.25-tuxcare.1
15.5.25-tuxcare.2
next-rspack
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions
15.5.2415.5.24-tuxcare.1
15.5.24-tuxcare.2
next-rspack
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions
15.5.2315.5.23-tuxcare.1
15.5.23-tuxcare.2
next-rspack
TuxCare:npm
From an advisory covering 5 CVEs
 16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions
16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4
Show 5 moreShow less
16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9
16.0.6-tuxcare.13
@next/plugin-storybook
TuxCare:npm
 15.5.25-tuxcare.0 up to 15.5.25-tuxcare.2, plus listed versions
15.5.2515.5.25-tuxcare.1
15.5.25-tuxcare.2
@next/plugin-storybook
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions
15.5.2415.5.24-tuxcare.1
15.5.24-tuxcare.2
@next/plugin-storybook
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions
15.5.2315.5.23-tuxcare.1
15.5.23-tuxcare.2
@next/plugin-storybook
TuxCare:npm
From an advisory covering 5 CVEs
 16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions
16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4
Show 5 moreShow less
16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9
16.0.6-tuxcare.13
@next/polyfill-module
TuxCare:npm
 15.5.25-tuxcare.0 up to 15.5.25-tuxcare.2, plus listed versions
15.5.2515.5.25-tuxcare.1
15.5.25-tuxcare.2
@next/polyfill-module
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions
15.5.2415.5.24-tuxcare.1
15.5.24-tuxcare.2
@next/polyfill-module
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions
15.5.2315.5.23-tuxcare.1
15.5.23-tuxcare.2
@next/polyfill-module
TuxCare:npm
From an advisory covering 5 CVEs
 16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions
16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4
Show 5 moreShow less
16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9
16.0.6-tuxcare.13
@next/polyfill-nomodule
TuxCare:npm
 15.5.25-tuxcare.0 up to 15.5.25-tuxcare.2, plus listed versions
15.5.2515.5.25-tuxcare.1
15.5.25-tuxcare.2
@next/polyfill-nomodule
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions
15.5.2415.5.24-tuxcare.1
15.5.24-tuxcare.2
@next/polyfill-nomodule
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions
15.5.2315.5.23-tuxcare.1
15.5.23-tuxcare.2
@next/polyfill-nomodule
TuxCare:npm
From an advisory covering 5 CVEs
 16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions
16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4
Show 5 moreShow less
16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9
16.0.6-tuxcare.13
@next/react-refresh-utils
TuxCare:npm
 15.5.25-tuxcare.0 up to 15.5.25-tuxcare.2, plus listed versions
15.5.2515.5.25-tuxcare.1
15.5.25-tuxcare.2
@next/react-refresh-utils
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions
15.5.2415.5.24-tuxcare.1
15.5.24-tuxcare.2
@next/react-refresh-utils
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions
15.5.2315.5.23-tuxcare.1
15.5.23-tuxcare.2
@next/react-refresh-utils
TuxCare:npm
From an advisory covering 5 CVEs
 16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions
16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4
Show 5 moreShow less
16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9
16.0.6-tuxcare.13
@next/third-parties
TuxCare:npm
 15.5.25-tuxcare.0 up to 15.5.25-tuxcare.2, plus listed versions
15.5.2515.5.25-tuxcare.1
15.5.25-tuxcare.2
@next/third-parties
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions
15.5.2415.5.24-tuxcare.1
15.5.24-tuxcare.2
@next/third-parties
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions
15.5.2315.5.23-tuxcare.1
15.5.23-tuxcare.2
@next/third-parties
TuxCare:npm
From an advisory covering 5 CVEs
 16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions
16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4
Show 5 moreShow less
16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9
16.0.6-tuxcare.13
@next/swc-linux-x64-gnu
TuxCare:npm
 15.5.25-tuxcare.0 up to 15.5.25-tuxcare.2, plus listed versions
15.5.2515.5.25-tuxcare.1
15.5.25-tuxcare.2
@next/swc-linux-x64-gnu
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions
15.5.2415.5.24-tuxcare.1
15.5.24-tuxcare.2
@next/swc-linux-x64-gnu
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions
15.5.2315.5.23-tuxcare.1
15.5.23-tuxcare.2
@next/swc-linux-x64-gnu
TuxCare:npm
From an advisory covering 5 CVEs
 16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions
16.0.616.0.6-tuxcare.1016.0.6-tuxcare.316.0.6-tuxcare.416.0.6-tuxcare.5
Show 4 moreShow less
16.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9
16.0.6-tuxcare.13
@next/swc-linux-x64-gnu
TuxCare:npm
From an advisory covering 7 CVEs
 15.1.2-tuxcare.0 up to 15.1.2-tuxcare.3, plus listed versions
15.1.215.1.2-tuxcare.115.1.2-tuxcare.2
15.1.2-tuxcare.3
@next/codemod
TuxCare:npm
 15.5.25-tuxcare.0 up to 15.5.25-tuxcare.2, plus listed versions
15.5.2515.5.25-tuxcare.1
15.5.25-tuxcare.2
@next/codemod
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions
15.5.2415.5.24-tuxcare.1
15.5.24-tuxcare.2
@next/codemod
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions
15.5.2315.5.23-tuxcare.1
15.5.23-tuxcare.2
@next/codemod
TuxCare:npm
From an advisory covering 5 CVEs
 16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions
16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4
Show 5 moreShow less
16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9
16.0.6-tuxcare.13
@next/mdx
TuxCare:npm
 15.5.25-tuxcare.0 up to 15.5.25-tuxcare.2, plus listed versions
15.5.2515.5.25-tuxcare.1
15.5.25-tuxcare.2
@next/mdx
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions
15.5.2415.5.24-tuxcare.1
15.5.24-tuxcare.2
@next/mdx
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions
15.5.2315.5.23-tuxcare.1
15.5.23-tuxcare.2
@next/mdx
TuxCare:npm
From an advisory covering 5 CVEs
 16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions
16.0.616.0.6-tuxcare.1016.0.6-tuxcare.1216.0.6-tuxcare.316.0.6-tuxcare.4
Show 5 moreShow less
16.0.6-tuxcare.516.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9
16.0.6-tuxcare.13
@next/swc-linux-arm64-gnu
TuxCare:npm
 15.5.25-tuxcare.0 up to 15.5.25-tuxcare.2, plus listed versions
15.5.2515.5.25-tuxcare.1
15.5.25-tuxcare.2
@next/swc-linux-arm64-gnu
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.24-tuxcare.0 up to 15.5.24-tuxcare.2, plus listed versions
15.5.2415.5.24-tuxcare.1
15.5.24-tuxcare.2
@next/swc-linux-arm64-gnu
TuxCare:npm
From an advisory covering 2 CVEs
 15.5.23-tuxcare.0 up to 15.5.23-tuxcare.2, plus listed versions
15.5.2315.5.23-tuxcare.1
15.5.23-tuxcare.2
@next/swc-linux-arm64-gnu
TuxCare:npm
From an advisory covering 7 CVEs
 15.1.2-tuxcare.0 up to 15.1.2-tuxcare.3, plus listed versions
15.1.215.1.2-tuxcare.115.1.2-tuxcare.2
15.1.2-tuxcare.3
@next/swc-linux-arm64-gnu
TuxCare:npm
From an advisory covering 5 CVEs
 16.0.6-tuxcare.0 up to 16.0.6-tuxcare.13, plus listed versions
16.0.616.0.6-tuxcare.1016.0.6-tuxcare.316.0.6-tuxcare.416.0.6-tuxcare.5
Show 4 moreShow less
16.0.6-tuxcare.616.0.6-tuxcare.716.0.6-tuxcare.816.0.6-tuxcare.9
16.0.6-tuxcare.13
next
Root:npm
 before 15.5.27-aikido.1
15.5.27-aikido.116.3.8-aikido.115.5.27-aikido.2
@rootio/next
Root:npm
 before 15.5.27-root.io.1
15.5.27-root.io.116.3.8-root.io.115.5.27-root.io.2
next
Root:npm
 before 14.2.33-aikido.2
14.2.33-aikido.214.2.32-aikido.414.2.30-aikido.714.2.26-aikido.614.2.26-aikido.414.2.30-aikido.1013.4.19-aikido.613.4.19-aikido.714.2.10-aikido.314.2.13-aikido.314.2.3-aikido.114.2.15-aikido.414.0.4-aikido.914.1.3-aikido.214.2.25-aikido.214.1.0-aikido.414.2.18-aikido.213.3.0-aikido.514.2.15-aikido.313.4.19-aikido.314.1.0-aikido.714.1.0-aikido.814.2.13-aikido.114.2.3-aikido.514.2.0-aikido.214.0.3-aikido.314.2.5-aikido.914.2.5-aikido.1014.2.2-aikido.714.2.33-aikido.114.1.3-aikido.514.2.29-aikido.114.2.29-aikido.514.2.31-aikido.214.2.18-aikido.114.0.0-aikido.714.2.10-aikido.414.2.13-aikido.414.2.10-aikido.214.2.18-aikido.614.2.21-aikido.614.2.16-aikido.614.2.25-aikido.114.2.0-aikido.614.2.31-aikido.514.2.0-aikido.514.2.2-aikido.914.2.30-aikido.814.2.24-aikido.714.0.3-aikido.614.2.32-aikido.514.2.33-aikido.314.0.0-aikido.514.2.3-aikido.313.5.4-aikido.514.1.3-aikido.613.3.0-aikido.614.0.3-aikido.414.2.13-aikido.214.2.21-aikido.414.0.0-aikido.314.1.4-aikido.714.2.21-aikido.213.3.0-aikido.214.2.16-aikido.214.2.16-aikido.413.5.4-aikido.213.3.0-aikido.714.2.33-aikido.414.2.26-aikido.314.0.3-aikido.514.2.30-aikido.914.1.4-aikido.814.2.32-aikido.613.5.4-aikido.614.1.3-aikido.714.2.16-aikido.514.0.0-aikido.614.2.21-aikido.514.2.3-aikido.414.2.2-aikido.813.4.19-aikido.414.2.15-aikido.514.2.3-aikido.213.5.6-aikido.414.2.28-aikido.514.2.32-aikido.214.1.4-aikido.914.1.3-aikido.113.3.0-aikido.314.2.32-aikido.713.5.6-aikido.514.2.15-aikido.614.1.3-aikido.814.2.32-aikido.814.2.29-aikido.414.2.28-aikido.114.2.33-aikido.513.5.6-aikido.614.2.26-aikido.514.2.28-aikido.214.2.26-aikido.214.0.4-aikido.814.2.28-aikido.314.1.0-aikido.214.2.31-aikido.314.2.24-aikido.614.1.4-aikido.614.2.18-aikido.313.3.0-aikido.414.1.0-aikido.514.2.16-aikido.314.0.0-aikido.414.1.0-aikido.314.2.18-aikido.413.5.4-aikido.314.2.31-aikido.114.2.0-aikido.313.4.19-aikido.514.2.31-aikido.414.2.29-aikido.214.2.0-aikido.113.5.4-aikido.414.2.21-aikido.114.2.16-aikido.114.1.3-aikido.313.3.0-aikido.814.2.21-aikido.314.2.32-aikido.314.2.29-aikido.313.5.11-aikido.914.1.3-aikido.414.2.0-aikido.414.2.30-aikido.614.2.28-aikido.414.2.33-aikido.614.1.0-aikido.614.2.18-aikido.513.5.6-aikido.7
@rootio/next
Root:npm
 before 14.2.33-root.io.2
14.2.33-root.io.214.2.32-root.io.414.2.30-root.io.714.2.26-root.io.614.2.26-root.io.414.2.30-root.io.1013.4.19-root.io.613.4.19-root.io.714.2.10-root.io.314.2.13-root.io.314.2.3-root.io.114.2.15-root.io.414.0.4-root.io.914.1.3-root.io.214.2.25-root.io.214.1.0-root.io.414.2.18-root.io.213.3.0-root.io.514.2.15-root.io.313.4.19-root.io.314.1.0-root.io.714.1.0-root.io.814.2.13-root.io.114.2.3-root.io.514.2.0-root.io.214.0.3-root.io.314.2.5-root.io.914.2.5-root.io.1014.2.2-root.io.714.2.33-root.io.114.1.3-root.io.514.2.29-root.io.114.2.29-root.io.514.2.31-root.io.214.2.18-root.io.114.0.0-root.io.714.2.10-root.io.414.2.13-root.io.414.2.10-root.io.214.2.18-root.io.614.2.21-root.io.614.2.16-root.io.614.2.25-root.io.114.2.0-root.io.614.2.31-root.io.514.2.0-root.io.514.2.2-root.io.914.2.30-root.io.814.2.24-root.io.714.0.3-root.io.614.2.32-root.io.514.2.33-root.io.314.0.0-root.io.514.2.3-root.io.313.5.4-root.io.514.1.3-root.io.613.3.0-root.io.614.0.3-root.io.414.2.13-root.io.214.2.21-root.io.414.0.0-root.io.314.1.4-root.io.714.2.21-root.io.213.3.0-root.io.214.2.16-root.io.214.2.16-root.io.413.5.4-root.io.213.3.0-root.io.714.2.33-root.io.414.2.26-root.io.314.0.3-root.io.514.2.30-root.io.914.1.4-root.io.814.2.32-root.io.613.5.4-root.io.614.1.3-root.io.714.2.16-root.io.514.0.0-root.io.614.2.21-root.io.514.2.3-root.io.414.2.2-root.io.813.4.19-root.io.414.2.15-root.io.514.2.3-root.io.213.5.6-root.io.414.2.28-root.io.514.2.32-root.io.214.1.4-root.io.914.1.3-root.io.113.3.0-root.io.314.2.32-root.io.713.5.6-root.io.514.2.15-root.io.614.1.3-root.io.814.2.32-root.io.814.2.29-root.io.414.2.28-root.io.114.2.33-root.io.513.5.6-root.io.614.2.26-root.io.514.2.28-root.io.214.2.26-root.io.214.0.4-root.io.814.2.28-root.io.314.2.24-root.io.614.1.0-root.io.214.2.31-root.io.314.1.4-root.io.614.2.18-root.io.313.3.0-root.io.414.1.0-root.io.514.2.16-root.io.314.0.0-root.io.414.1.0-root.io.314.2.18-root.io.413.5.4-root.io.314.2.31-root.io.114.2.0-root.io.313.4.19-root.io.514.2.31-root.io.414.2.29-root.io.214.2.0-root.io.113.5.4-root.io.414.2.21-root.io.114.1.3-root.io.314.2.16-root.io.113.3.0-root.io.814.2.21-root.io.314.2.32-root.io.314.2.29-root.io.313.5.11-root.io.914.1.3-root.io.414.2.0-root.io.414.2.30-root.io.614.2.33-root.io.614.2.28-root.io.414.1.0-root.io.613.5.6-root.io.714.2.18-root.io.5

History

History
RecordedChangedSources
affected, facts
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-94543 is a medium vulnerability (CVSS 6.3) in Vercel Next.js, published December 11, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.51%, the 43rd percentile. Fixed in next 15.5.27.

References

Show 10 moreShow less
This page doesn't list everything

Left out on purpose, here and in the API, to keep responses small: 15 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open