{"id":"CVE-2026-44573","aliases":["CLSA-2026-1791807020","CLSA-2026-1792346490","CLSA-2026-1792367406","EUVD-2026-30057","GHSA-36qx-fr4f-26g5","GHSA-4633-3j49-mh5q","GHSA-4c39-4ccg-62r3","GHSA-8h8q-6873-q5fj","GHSA-955p-x3mx-jcvp","GHSA-h25m-26qc-wcjf","GHSA-q4gf-8mx6-v5v3","ROOT-APP-NPM-CVE-2026-44573","ROOT-APP-NPM-GHSA-8h8q-6873-q5fj","ROOT-APP-NPM-GHSA-h25m-26qc-wcjf","ROOT-APP-NPM-GHSA-q4gf-8mx6-v5v3"],"status":"published","title":"Next.js: Middleware / Proxy bypass in Pages Router applications using i18n","description":"Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router with i18n configured and middleware/proxy-based authorization can allow unauthorized access to protected page data through locale-less /_next/data/\u003cbuildId\u003e/\u003cpage\u003e.json requests. In affected configurations, middleware does not run for the unprefixed data route, allowing an attacker to retrieve SSR JSON for protected pages without passing the intended authorization checks. This vulnerability is fixed in 15.5.16 and 16.2.5.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00796,"percentile":0.56721,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400","CWE-502","CWE-551","CWE-770","CWE-863"],"published":"2026-01-28T15:38:01Z","modified":"2026-11-02T11:15:06Z","fixes":[{"ecosystem":"npm","package":"next","fixed_in":["15.5.16","16.2.5","15.0.8","15.1.12","15.2.9","15.3.9","15.4.11","15.5.10","15.6.0-canary.61","16.0.11","16.1.5","15.5.15","16.2.3"],"sources":["ghsa","osv"]},{"ecosystem":"Root:npm","package":"next","fixed_in":["14.2.5-aikido.5","14.2.5-aikido.8","14.2.33-aikido.2","14.2.32-aikido.4","14.2.35-aikido.9","14.2.30-aikido.7","14.2.26-aikido.6","12.2.5-aikido.1","14.2.26-aikido.4","14.2.30-aikido.10","13.4.19-aikido.6","13.4.19-aikido.7","14.2.10-aikido.3","14.2.13-aikido.3","14.0.4-aikido.6","14.2.15-aikido.4","14.0.4-aikido.9","13.4.19-aikido.2","14.1.3-aikido.2","14.2.24-aikido.2","14.2.25-aikido.2","14.1.0-aikido.4","14.2.18-aikido.2","13.3.0-aikido.5","14.2.15-aikido.3","13.4.19-aikido.3","14.0.4-aikido.5","14.0.4-aikido.7","14.1.0-aikido.7","14.1.0-aikido.8","14.0.4-aikido.3","14.2.32-aikido.1","14.2.3-aikido.5","14.2.0-aikido.2","14.0.3-aikido.3","14.2.5-aikido.9","14.2.5-aikido.10","14.2.2-aikido.7","14.2.33-aikido.1","14.2.10-aikido.1","14.1.3-aikido.5","14.2.29-aikido.1","14.2.29-aikido.5","14.2.31-aikido.2","14.0.0-aikido.7","14.2.10-aikido.4","14.2.13-aikido.4","14.2.10-aikido.2","14.2.18-aikido.6","14.2.21-aikido.6","14.2.16-aikido.6","14.1.4-aikido.5","14.2.25-aikido.1","13.2.4-aikido.3","14.2.0-aikido.6","14.0.4-aikido.4","14.2.31-aikido.5","14.2.0-aikido.5","14.2.2-aikido.9","12.3.7-aikido.1","14.2.30-aikido.8","12.3.4-aikido.9","13.1.6-aikido.1","13.2.4-aikido.4","14.2.24-aikido.7","14.2.24-aikido.4","14.0.3-aikido.6","14.2.32-aikido.5","14.2.33-aikido.3","14.0.0-aikido.5","14.2.5-aikido.3","14.2.2-aikido.1","14.2.2-aikido.2","14.2.2-aikido.3","14.2.3-aikido.3","14.2.2-aikido.4","14.2.2-aikido.5","13.5.11-aikido.7","14.2.2-aikido.6","13.5.4-aikido.5","14.1.3-aikido.6","14.2.5-aikido.4","13.3.0-aikido.6","14.0.3-aikido.4","14.2.13-aikido.2","14.2.5-aikido.6","14.2.21-aikido.4","14.0.0-aikido.3","14.1.4-aikido.7","14.2.21-aikido.2","14.2.16-aikido.2","14.2.16-aikido.4","13.5.4-aikido.2","14.2.35-aikido.5","13.5.6-aikido.2","13.2.4-aikido.5","13.3.0-aikido.7","14.2.33-aikido.4","14.2.26-aikido.3","14.0.3-aikido.5","14.2.30-aikido.9","15.5.10-aikido.4","14.1.4-aikido.8","14.2.35-aikido.3","14.2.32-aikido.6","14.2.35-aikido.6","13.5.4-aikido.6","14.2.24-aikido.5","14.1.3-aikido.7","14.2.16-aikido.5","14.0.0-aikido.6","14.2.21-aikido.5","14.2.5-aikido.7","14.2.3-aikido.4","14.2.2-aikido.8","13.4.19-aikido.4","14.2.15-aikido.5","14.2.30-aikido.5","14.2.3-aikido.2","13.5.6-aikido.3","13.5.6-aikido.4","15.5.10-aikido.5","14.2.28-aikido.5","14.2.24-aikido.1","14.2.32-aikido.2","14.1.4-aikido.9","13.2.4-aikido.2","16.1.6-aikido.4","16.1.7-aikido.1","14.2.32-aikido.7","13.5.6-aikido.5","14.2.15-aikido.6","12.3.1-aikido.2","16.1.6-aikido.5","12.3.1-aikido.3","15.5.15-aikido.2","14.1.3-aikido.8","13.2.4-aikido.7","14.2.32-aikido.8","14.2.29-aikido.4","14.2.28-aikido.1","14.2.33-aikido.5","13.5.6-aikido.6","13.5.11-aikido.8","14.2.26-aikido.5","14.2.28-aikido.2","15.5.10-aikido.6","14.2.26-aikido.2","14.0.4-aikido.8","14.2.28-aikido.3","14.2.31-aikido.3","14.2.24-aikido.6","14.1.4-aikido.6","14.2.35-aikido.7","14.2.18-aikido.3","13.3.0-aikido.4","12.3.4-aikido.8","14.1.0-aikido.5","16.1.7-aikido.2","14.2.16-aikido.3","14.0.0-aikido.4","13.5.11-aikido.6","14.2.18-aikido.4","13.5.4-aikido.3","12.3.1-aikido.4","14.2.31-aikido.1","14.1.4-aikido.3","14.2.0-aikido.3","13.4.19-aikido.5","15.5.15-aikido.3","16.1.6-aikido.6","14.2.31-aikido.4","14.1.4-aikido.4","14.2.29-aikido.2","14.2.0-aikido.1","13.5.4-aikido.4","14.2.21-aikido.1","14.2.16-aikido.1","15.5.15-aikido.4","16.1.6-aikido.7","16.1.7-aikido.3","14.1.3-aikido.3","13.3.0-aikido.8","14.2.24-aikido.3","13.1.6-aikido.2","14.2.21-aikido.3","13.2.4-aikido.6","14.2.32-aikido.3","14.2.29-aikido.3","13.5.11-aikido.9","12.3.7-aikido.2","14.0.3-aikido.2","14.1.3-aikido.4","14.2.0-aikido.4","12.2.5-aikido.2","12.3.1-aikido.6","12.3.1-aikido.5","14.2.30-aikido.6","14.2.28-aikido.4","14.2.33-aikido.6","14.1.0-aikido.6","14.2.35-aikido.8","14.2.35-aikido.4","15.5.10-aikido.3","16.1.6-aikido.8","14.2.18-aikido.5","13.5.6-aikido.7","14.2.35-aikido.10","14.2.35-aikido.11","16.2.5-aikido.1","16.2.5-aikido.3","16.2.5-aikido.2","14.2.3-aikido.1","14.0.4-aikido.2","14.2.13-aikido.1","14.2.18-aikido.1","14.2.5-aikido.2","14.2.30-aikido.3","14.2.30-aikido.4","14.1.0-aikido.3","14.2.30-aikido.1","14.2.30-aikido.2","14.2.35-aikido.2","14.0.0-aikido.2","14.2.35-aikido.1","14.0.0-aikido.1","13.3.0-aikido.1","13.4.19-aikido.1","13.5.11-aikido.4","14.0.3-aikido.1","13.5.6-aikido.1","13.5.4-aikido.1","13.3.0-aikido.2","14.1.3-aikido.1","13.3.0-aikido.3","13.5.11-aikido.5"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/next","fixed_in":["14.2.5-root.io.5","14.2.5-root.io.8","14.2.33-root.io.2","14.2.32-root.io.4","14.2.35-root.io.9","14.2.30-root.io.7","14.2.26-root.io.6","12.2.5-root.io.1","14.2.26-root.io.4","14.2.30-root.io.10","13.4.19-root.io.6","13.4.19-root.io.7","14.2.10-root.io.3","14.2.13-root.io.3","14.0.4-root.io.6","14.2.15-root.io.4","14.0.4-root.io.9","13.4.19-root.io.2","14.1.3-root.io.2","14.2.25-root.io.2","14.2.24-root.io.2","14.1.0-root.io.4","14.2.18-root.io.2","13.3.0-root.io.5","14.2.15-root.io.3","14.0.4-root.io.5","13.4.19-root.io.3","14.0.4-root.io.7","14.1.0-root.io.7","14.1.0-root.io.8","14.0.4-root.io.3","14.2.32-root.io.1","14.2.3-root.io.5","14.2.0-root.io.2","14.0.3-root.io.3","14.2.5-root.io.9","14.2.5-root.io.10","14.2.2-root.io.7","14.2.33-root.io.1","14.2.10-root.io.1","14.1.3-root.io.5","14.2.29-root.io.1","14.2.29-root.io.5","14.2.31-root.io.2","14.0.0-root.io.7","14.2.10-root.io.4","14.2.13-root.io.4","14.2.10-root.io.2","14.2.18-root.io.6","14.2.21-root.io.6","14.2.16-root.io.6","14.1.4-root.io.5","14.2.25-root.io.1","13.2.4-root.io.3","14.2.0-root.io.6","14.0.4-root.io.4","14.2.31-root.io.5","14.2.0-root.io.5","14.2.2-root.io.9","12.3.7-root.io.1","14.2.30-root.io.8","12.3.4-root.io.9","13.1.6-root.io.1","13.2.4-root.io.4","14.2.24-root.io.7","14.2.24-root.io.4","14.0.3-root.io.6","14.2.32-root.io.5","14.2.33-root.io.3","14.0.0-root.io.5","14.2.5-root.io.3","15.5.15-root.io.1","14.2.2-root.io.1","16.1.6-root.io.3","14.2.2-root.io.2","14.2.3-root.io.3","14.2.2-root.io.3","14.2.2-root.io.4","13.5.4-root.io.5","14.2.2-root.io.5","13.5.11-root.io.7","14.2.2-root.io.6","14.1.3-root.io.6","14.2.5-root.io.4","13.3.0-root.io.6","14.0.3-root.io.4","14.2.13-root.io.2","14.2.5-root.io.6","14.2.21-root.io.4","14.0.0-root.io.3","14.1.4-root.io.7","14.2.21-root.io.2","14.2.16-root.io.2","14.2.16-root.io.4","13.5.4-root.io.2","14.2.35-root.io.5","13.5.6-root.io.2","13.2.4-root.io.5","13.3.0-root.io.7","14.2.33-root.io.4","14.2.26-root.io.3","14.0.3-root.io.5","14.2.30-root.io.9","15.5.10-root.io.4","14.1.4-root.io.8","14.2.35-root.io.3","14.2.32-root.io.6","14.2.35-root.io.6","13.5.4-root.io.6","14.2.24-root.io.5","14.1.3-root.io.7","14.2.16-root.io.5","14.0.0-root.io.6","14.2.21-root.io.5","14.2.5-root.io.7","14.2.3-root.io.4","14.2.2-root.io.8","13.4.19-root.io.4","14.2.15-root.io.5","14.2.30-root.io.5","14.2.3-root.io.2","13.5.6-root.io.3","13.5.6-root.io.4","15.5.10-root.io.5","14.2.28-root.io.5","14.2.24-root.io.1","14.2.32-root.io.2","14.1.4-root.io.9","13.2.4-root.io.2","16.1.6-root.io.4","16.1.7-root.io.1","14.2.32-root.io.7","13.5.6-root.io.5","14.2.15-root.io.6","12.3.1-root.io.2","16.1.6-root.io.5","12.3.1-root.io.3","13.2.4-root.io.7","15.5.15-root.io.2","14.1.3-root.io.8","14.2.32-root.io.8","14.2.29-root.io.4","14.2.28-root.io.1","14.2.33-root.io.5","13.5.6-root.io.6","13.5.11-root.io.8","14.2.26-root.io.5","14.2.28-root.io.2","15.5.10-root.io.6","14.2.26-root.io.2","14.0.4-root.io.8","14.2.28-root.io.3","14.2.24-root.io.6","14.2.31-root.io.3","14.2.35-root.io.7","14.1.4-root.io.6","14.2.18-root.io.3","13.3.0-root.io.4","12.3.4-root.io.8","14.1.0-root.io.5","16.1.7-root.io.2","14.2.16-root.io.3","14.0.0-root.io.4","13.5.11-root.io.6","14.2.18-root.io.4","13.5.4-root.io.3","12.3.1-root.io.4","14.2.31-root.io.1","14.1.4-root.io.3","14.2.0-root.io.3","13.4.19-root.io.5","14.2.31-root.io.4","15.5.15-root.io.3","16.1.6-root.io.6","14.2.29-root.io.2","14.1.4-root.io.4","14.2.0-root.io.1","13.5.4-root.io.4","14.2.21-root.io.1","14.1.3-root.io.3","14.2.16-root.io.1","15.5.15-root.io.4","16.1.6-root.io.7","16.1.7-root.io.3","13.3.0-root.io.8","14.2.24-root.io.3","13.1.6-root.io.2","14.2.21-root.io.3","13.2.4-root.io.6","14.2.32-root.io.3","14.2.29-root.io.3","13.5.11-root.io.9","12.3.7-root.io.2","14.0.3-root.io.2","14.1.3-root.io.4","14.2.0-root.io.4","12.2.5-root.io.2","12.3.1-root.io.6","12.3.1-root.io.5","14.2.30-root.io.6","14.2.33-root.io.6","14.2.28-root.io.4","14.1.0-root.io.6","14.2.35-root.io.8","14.2.35-root.io.4","15.5.10-root.io.3","13.5.6-root.io.7","16.1.6-root.io.8","14.2.18-root.io.5","14.2.35-root.io.10","14.2.35-root.io.11","16.2.5-root.io.1","16.2.5-root.io.3","16.2.5-root.io.2","14.2.3-root.io.1","14.0.4-root.io.2","14.2.13-root.io.1","14.2.18-root.io.1","14.2.5-root.io.2","14.2.30-root.io.3","14.2.30-root.io.4","14.1.0-root.io.3","14.2.30-root.io.1","14.2.30-root.io.2","14.2.35-root.io.2","14.0.0-root.io.2","14.2.35-root.io.1","16.1.6-root.io.1","16.1.6-root.io.2","14.0.0-root.io.1","13.3.0-root.io.1","13.4.19-root.io.1","13.5.11-root.io.4","14.0.3-root.io.1","13.5.6-root.io.1","13.5.4-root.io.1","13.3.0-root.io.2","14.1.3-root.io.1","13.3.0-root.io.3","13.5.11-root.io.5"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.0"},{"fixed":"15.5.16"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.0"},{"fixed":"16.2.5"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.0.0"},{"fixed":"15.5.16"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.0"},{"fixed":"16.2.5"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.0.0"},{"fixed":"15.0.8"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.1.1-canary.0"},{"fixed":"15.1.12"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.0-canary.0"},{"fixed":"15.2.9"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.3.0-canary.0"},{"fixed":"15.3.9"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.4.0-canary.0"},{"fixed":"15.4.11"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.5.1-canary.0"},{"fixed":"15.5.10"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.6.0-canary.0"},{"fixed":"15.6.0-canary.61"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.0-beta.0"},{"fixed":"16.0.11"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.1.0-canary.0"},{"fixed":"16.1.5"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.0.0"},{"fixed":"15.5.15"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.0-beta.0"},{"fixed":"16.2.3"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/swc-linux-x64-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.1.2-tuxcare.0"},{"fixed":"15.1.2-tuxcare.2"}]}],"versions":["15.1.2","15.1.2-tuxcare.1"],"bundled":22},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/swc-linux-arm64-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.1.2-tuxcare.0"},{"fixed":"15.1.2-tuxcare.2"}]}],"versions":["15.1.2","15.1.2-tuxcare.1"],"bundled":22},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"12.2.0"},{"fixed":"15.5.16"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.0.0"},{"fixed":"16.2.5"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"13.0.0"},{"fixed":"15.5.16"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.0.0"},{"fixed":"16.2.5"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"13.0.0"},{"fixed":"15.0.8"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.1.1-canary.0"},{"fixed":"15.1.12"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.2.0-canary.0"},{"fixed":"15.2.9"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.3.0-canary.0"},{"fixed":"15.3.9"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.4.0-canary.0"},{"fixed":"15.4.11"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.5.1-canary.0"},{"fixed":"15.5.10"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.6.0-canary.0"},{"fixed":"15.6.0-canary.61"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.0.0-beta.0"},{"fixed":"16.0.11"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.1.0-canary.0"},{"fixed":"16.1.5"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"13.0.0"},{"fixed":"15.5.15"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.0.0-beta.0"},{"fixed":"16.2.3"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-aikido.5"},{"fixed":"14.2.5-aikido.8"},{"fixed":"14.2.33-aikido.2"},{"fixed":"14.2.32-aikido.4"},{"fixed":"14.2.35-aikido.9"},{"fixed":"14.2.30-aikido.7"},{"fixed":"14.2.26-aikido.6"},{"fixed":"12.2.5-aikido.1"},{"fixed":"14.2.26-aikido.4"},{"fixed":"14.2.30-aikido.10"},{"fixed":"13.4.19-aikido.6"},{"fixed":"13.4.19-aikido.7"},{"fixed":"14.2.10-aikido.3"},{"fixed":"14.2.13-aikido.3"},{"fixed":"14.0.4-aikido.6"},{"fixed":"14.2.15-aikido.4"},{"fixed":"14.0.4-aikido.9"},{"fixed":"13.4.19-aikido.2"},{"fixed":"14.1.3-aikido.2"},{"fixed":"14.2.24-aikido.2"},{"fixed":"14.2.25-aikido.2"},{"fixed":"14.1.0-aikido.4"},{"fixed":"14.2.18-aikido.2"},{"fixed":"13.3.0-aikido.5"},{"fixed":"14.2.15-aikido.3"},{"fixed":"13.4.19-aikido.3"},{"fixed":"14.0.4-aikido.5"},{"fixed":"14.0.4-aikido.7"},{"fixed":"14.1.0-aikido.7"},{"fixed":"14.1.0-aikido.8"},{"fixed":"14.0.4-aikido.3"},{"fixed":"14.2.32-aikido.1"},{"fixed":"14.2.3-aikido.5"},{"fixed":"14.2.0-aikido.2"},{"fixed":"14.0.3-aikido.3"},{"fixed":"14.2.5-aikido.9"},{"fixed":"14.2.5-aikido.10"},{"fixed":"14.2.2-aikido.7"},{"fixed":"14.2.33-aikido.1"},{"fixed":"14.2.10-aikido.1"},{"fixed":"14.1.3-aikido.5"},{"fixed":"14.2.29-aikido.1"},{"fixed":"14.2.29-aikido.5"},{"fixed":"14.2.31-aikido.2"},{"fixed":"14.0.0-aikido.7"},{"fixed":"14.2.10-aikido.4"},{"fixed":"14.2.13-aikido.4"},{"fixed":"14.2.10-aikido.2"},{"fixed":"14.2.18-aikido.6"},{"fixed":"14.2.21-aikido.6"},{"fixed":"14.2.16-aikido.6"},{"fixed":"14.1.4-aikido.5"},{"fixed":"14.2.25-aikido.1"},{"fixed":"13.2.4-aikido.3"},{"fixed":"14.2.0-aikido.6"},{"fixed":"14.0.4-aikido.4"},{"fixed":"14.2.31-aikido.5"},{"fixed":"14.2.0-aikido.5"},{"fixed":"14.2.2-aikido.9"},{"fixed":"12.3.7-aikido.1"},{"fixed":"14.2.30-aikido.8"},{"fixed":"12.3.4-aikido.9"},{"fixed":"13.1.6-aikido.1"},{"fixed":"13.2.4-aikido.4"},{"fixed":"14.2.24-aikido.7"},{"fixed":"14.2.24-aikido.4"},{"fixed":"14.0.3-aikido.6"},{"fixed":"14.2.32-aikido.5"},{"fixed":"14.2.33-aikido.3"},{"fixed":"14.0.0-aikido.5"},{"fixed":"14.2.5-aikido.3"},{"fixed":"14.2.2-aikido.1"},{"fixed":"14.2.2-aikido.2"},{"fixed":"14.2.2-aikido.3"},{"fixed":"14.2.3-aikido.3"},{"fixed":"14.2.2-aikido.4"},{"fixed":"14.2.2-aikido.5"},{"fixed":"13.5.11-aikido.7"},{"fixed":"14.2.2-aikido.6"},{"fixed":"13.5.4-aikido.5"},{"fixed":"14.1.3-aikido.6"},{"fixed":"14.2.5-aikido.4"},{"fixed":"13.3.0-aikido.6"},{"fixed":"14.0.3-aikido.4"},{"fixed":"14.2.13-aikido.2"},{"fixed":"14.2.5-aikido.6"},{"fixed":"14.2.21-aikido.4"},{"fixed":"14.0.0-aikido.3"},{"fixed":"14.1.4-aikido.7"},{"fixed":"14.2.21-aikido.2"},{"fixed":"14.2.16-aikido.2"},{"fixed":"14.2.16-aikido.4"},{"fixed":"13.5.4-aikido.2"},{"fixed":"14.2.35-aikido.5"},{"fixed":"13.5.6-aikido.2"},{"fixed":"13.2.4-aikido.5"},{"fixed":"13.3.0-aikido.7"},{"fixed":"14.2.33-aikido.4"},{"fixed":"14.2.26-aikido.3"},{"fixed":"14.0.3-aikido.5"},{"fixed":"14.2.30-aikido.9"},{"fixed":"15.5.10-aikido.4"},{"fixed":"14.1.4-aikido.8"},{"fixed":"14.2.35-aikido.3"},{"fixed":"14.2.32-aikido.6"},{"fixed":"14.2.35-aikido.6"},{"fixed":"13.5.4-aikido.6"},{"fixed":"14.2.24-aikido.5"},{"fixed":"14.1.3-aikido.7"},{"fixed":"14.2.16-aikido.5"},{"fixed":"14.0.0-aikido.6"},{"fixed":"14.2.21-aikido.5"},{"fixed":"14.2.5-aikido.7"},{"fixed":"14.2.3-aikido.4"},{"fixed":"14.2.2-aikido.8"},{"fixed":"13.4.19-aikido.4"},{"fixed":"14.2.15-aikido.5"},{"fixed":"14.2.30-aikido.5"},{"fixed":"14.2.3-aikido.2"},{"fixed":"13.5.6-aikido.3"},{"fixed":"13.5.6-aikido.4"},{"fixed":"15.5.10-aikido.5"},{"fixed":"14.2.28-aikido.5"},{"fixed":"14.2.24-aikido.1"},{"fixed":"14.2.32-aikido.2"},{"fixed":"14.1.4-aikido.9"},{"fixed":"13.2.4-aikido.2"},{"fixed":"16.1.6-aikido.4"},{"fixed":"16.1.7-aikido.1"},{"fixed":"14.2.32-aikido.7"},{"fixed":"13.5.6-aikido.5"},{"fixed":"14.2.15-aikido.6"},{"fixed":"12.3.1-aikido.2"},{"fixed":"16.1.6-aikido.5"},{"fixed":"12.3.1-aikido.3"},{"fixed":"15.5.15-aikido.2"},{"fixed":"14.1.3-aikido.8"},{"fixed":"13.2.4-aikido.7"},{"fixed":"14.2.32-aikido.8"},{"fixed":"14.2.29-aikido.4"},{"fixed":"14.2.28-aikido.1"},{"fixed":"14.2.33-aikido.5"},{"fixed":"13.5.6-aikido.6"},{"fixed":"13.5.11-aikido.8"},{"fixed":"14.2.26-aikido.5"},{"fixed":"14.2.28-aikido.2"},{"fixed":"15.5.10-aikido.6"},{"fixed":"14.2.26-aikido.2"},{"fixed":"14.0.4-aikido.8"},{"fixed":"14.2.28-aikido.3"},{"fixed":"14.2.31-aikido.3"},{"fixed":"14.2.24-aikido.6"},{"fixed":"14.1.4-aikido.6"},{"fixed":"14.2.35-aikido.7"},{"fixed":"14.2.18-aikido.3"},{"fixed":"13.3.0-aikido.4"},{"fixed":"12.3.4-aikido.8"},{"fixed":"14.1.0-aikido.5"},{"fixed":"16.1.7-aikido.2"},{"fixed":"14.2.16-aikido.3"},{"fixed":"14.0.0-aikido.4"},{"fixed":"13.5.11-aikido.6"},{"fixed":"14.2.18-aikido.4"},{"fixed":"13.5.4-aikido.3"},{"fixed":"12.3.1-aikido.4"},{"fixed":"14.2.31-aikido.1"},{"fixed":"14.1.4-aikido.3"},{"fixed":"14.2.0-aikido.3"},{"fixed":"13.4.19-aikido.5"},{"fixed":"15.5.15-aikido.3"},{"fixed":"16.1.6-aikido.6"},{"fixed":"14.2.31-aikido.4"},{"fixed":"14.1.4-aikido.4"},{"fixed":"14.2.29-aikido.2"},{"fixed":"14.2.0-aikido.1"},{"fixed":"13.5.4-aikido.4"},{"fixed":"14.2.21-aikido.1"},{"fixed":"14.2.16-aikido.1"},{"fixed":"15.5.15-aikido.4"},{"fixed":"16.1.6-aikido.7"},{"fixed":"16.1.7-aikido.3"},{"fixed":"14.1.3-aikido.3"},{"fixed":"13.3.0-aikido.8"},{"fixed":"14.2.24-aikido.3"},{"fixed":"13.1.6-aikido.2"},{"fixed":"14.2.21-aikido.3"},{"fixed":"13.2.4-aikido.6"},{"fixed":"14.2.32-aikido.3"},{"fixed":"14.2.29-aikido.3"},{"fixed":"13.5.11-aikido.9"},{"fixed":"12.3.7-aikido.2"},{"fixed":"14.0.3-aikido.2"},{"fixed":"14.1.3-aikido.4"},{"fixed":"14.2.0-aikido.4"},{"fixed":"12.2.5-aikido.2"},{"fixed":"12.3.1-aikido.6"},{"fixed":"12.3.1-aikido.5"},{"fixed":"14.2.30-aikido.6"},{"fixed":"14.2.28-aikido.4"},{"fixed":"14.2.33-aikido.6"},{"fixed":"14.1.0-aikido.6"},{"fixed":"14.2.35-aikido.8"},{"fixed":"14.2.35-aikido.4"},{"fixed":"15.5.10-aikido.3"},{"fixed":"16.1.6-aikido.8"},{"fixed":"14.2.18-aikido.5"},{"fixed":"13.5.6-aikido.7"},{"fixed":"14.2.35-aikido.10"},{"fixed":"14.2.35-aikido.11"},{"fixed":"16.2.5-aikido.1"},{"fixed":"16.2.5-aikido.3"},{"fixed":"16.2.5-aikido.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-root.io.5"},{"fixed":"14.2.5-root.io.8"},{"fixed":"14.2.33-root.io.2"},{"fixed":"14.2.32-root.io.4"},{"fixed":"14.2.35-root.io.9"},{"fixed":"14.2.30-root.io.7"},{"fixed":"14.2.26-root.io.6"},{"fixed":"12.2.5-root.io.1"},{"fixed":"14.2.26-root.io.4"},{"fixed":"14.2.30-root.io.10"},{"fixed":"13.4.19-root.io.6"},{"fixed":"13.4.19-root.io.7"},{"fixed":"14.2.10-root.io.3"},{"fixed":"14.2.13-root.io.3"},{"fixed":"14.0.4-root.io.6"},{"fixed":"14.2.15-root.io.4"},{"fixed":"14.0.4-root.io.9"},{"fixed":"13.4.19-root.io.2"},{"fixed":"14.1.3-root.io.2"},{"fixed":"14.2.25-root.io.2"},{"fixed":"14.2.24-root.io.2"},{"fixed":"14.1.0-root.io.4"},{"fixed":"14.2.18-root.io.2"},{"fixed":"13.3.0-root.io.5"},{"fixed":"14.2.15-root.io.3"},{"fixed":"14.0.4-root.io.5"},{"fixed":"13.4.19-root.io.3"},{"fixed":"14.0.4-root.io.7"},{"fixed":"14.1.0-root.io.7"},{"fixed":"14.1.0-root.io.8"},{"fixed":"14.0.4-root.io.3"},{"fixed":"14.2.32-root.io.1"},{"fixed":"14.2.3-root.io.5"},{"fixed":"14.2.0-root.io.2"},{"fixed":"14.0.3-root.io.3"},{"fixed":"14.2.5-root.io.9"},{"fixed":"14.2.5-root.io.10"},{"fixed":"14.2.2-root.io.7"},{"fixed":"14.2.33-root.io.1"},{"fixed":"14.2.10-root.io.1"},{"fixed":"14.1.3-root.io.5"},{"fixed":"14.2.29-root.io.1"},{"fixed":"14.2.29-root.io.5"},{"fixed":"14.2.31-root.io.2"},{"fixed":"14.0.0-root.io.7"},{"fixed":"14.2.10-root.io.4"},{"fixed":"14.2.13-root.io.4"},{"fixed":"14.2.10-root.io.2"},{"fixed":"14.2.18-root.io.6"},{"fixed":"14.2.21-root.io.6"},{"fixed":"14.2.16-root.io.6"},{"fixed":"14.1.4-root.io.5"},{"fixed":"14.2.25-root.io.1"},{"fixed":"13.2.4-root.io.3"},{"fixed":"14.2.0-root.io.6"},{"fixed":"14.0.4-root.io.4"},{"fixed":"14.2.31-root.io.5"},{"fixed":"14.2.0-root.io.5"},{"fixed":"14.2.2-root.io.9"},{"fixed":"12.3.7-root.io.1"},{"fixed":"14.2.30-root.io.8"},{"fixed":"12.3.4-root.io.9"},{"fixed":"13.1.6-root.io.1"},{"fixed":"13.2.4-root.io.4"},{"fixed":"14.2.24-root.io.7"},{"fixed":"14.2.24-root.io.4"},{"fixed":"14.0.3-root.io.6"},{"fixed":"14.2.32-root.io.5"},{"fixed":"14.2.33-root.io.3"},{"fixed":"14.0.0-root.io.5"},{"fixed":"14.2.5-root.io.3"},{"fixed":"15.5.15-root.io.1"},{"fixed":"14.2.2-root.io.1"},{"fixed":"16.1.6-root.io.3"},{"fixed":"14.2.2-root.io.2"},{"fixed":"14.2.3-root.io.3"},{"fixed":"14.2.2-root.io.3"},{"fixed":"14.2.2-root.io.4"},{"fixed":"13.5.4-root.io.5"},{"fixed":"14.2.2-root.io.5"},{"fixed":"13.5.11-root.io.7"},{"fixed":"14.2.2-root.io.6"},{"fixed":"14.1.3-root.io.6"},{"fixed":"14.2.5-root.io.4"},{"fixed":"13.3.0-root.io.6"},{"fixed":"14.0.3-root.io.4"},{"fixed":"14.2.13-root.io.2"},{"fixed":"14.2.5-root.io.6"},{"fixed":"14.2.21-root.io.4"},{"fixed":"14.0.0-root.io.3"},{"fixed":"14.1.4-root.io.7"},{"fixed":"14.2.21-root.io.2"},{"fixed":"14.2.16-root.io.2"},{"fixed":"14.2.16-root.io.4"},{"fixed":"13.5.4-root.io.2"},{"fixed":"14.2.35-root.io.5"},{"fixed":"13.5.6-root.io.2"},{"fixed":"13.2.4-root.io.5"},{"fixed":"13.3.0-root.io.7"},{"fixed":"14.2.33-root.io.4"},{"fixed":"14.2.26-root.io.3"},{"fixed":"14.0.3-root.io.5"},{"fixed":"14.2.30-root.io.9"},{"fixed":"15.5.10-root.io.4"},{"fixed":"14.1.4-root.io.8"},{"fixed":"14.2.35-root.io.3"},{"fixed":"14.2.32-root.io.6"},{"fixed":"14.2.35-root.io.6"},{"fixed":"13.5.4-root.io.6"},{"fixed":"14.2.24-root.io.5"},{"fixed":"14.1.3-root.io.7"},{"fixed":"14.2.16-root.io.5"},{"fixed":"14.0.0-root.io.6"},{"fixed":"14.2.21-root.io.5"},{"fixed":"14.2.5-root.io.7"},{"fixed":"14.2.3-root.io.4"},{"fixed":"14.2.2-root.io.8"},{"fixed":"13.4.19-root.io.4"},{"fixed":"14.2.15-root.io.5"},{"fixed":"14.2.30-root.io.5"},{"fixed":"14.2.3-root.io.2"},{"fixed":"13.5.6-root.io.3"},{"fixed":"13.5.6-root.io.4"},{"fixed":"15.5.10-root.io.5"},{"fixed":"14.2.28-root.io.5"},{"fixed":"14.2.24-root.io.1"},{"fixed":"14.2.32-root.io.2"},{"fixed":"14.1.4-root.io.9"},{"fixed":"13.2.4-root.io.2"},{"fixed":"16.1.6-root.io.4"},{"fixed":"16.1.7-root.io.1"},{"fixed":"14.2.32-root.io.7"},{"fixed":"13.5.6-root.io.5"},{"fixed":"14.2.15-root.io.6"},{"fixed":"12.3.1-root.io.2"},{"fixed":"16.1.6-root.io.5"},{"fixed":"12.3.1-root.io.3"},{"fixed":"13.2.4-root.io.7"},{"fixed":"15.5.15-root.io.2"},{"fixed":"14.1.3-root.io.8"},{"fixed":"14.2.32-root.io.8"},{"fixed":"14.2.29-root.io.4"},{"fixed":"14.2.28-root.io.1"},{"fixed":"14.2.33-root.io.5"},{"fixed":"13.5.6-root.io.6"},{"fixed":"13.5.11-root.io.8"},{"fixed":"14.2.26-root.io.5"},{"fixed":"14.2.28-root.io.2"},{"fixed":"15.5.10-root.io.6"},{"fixed":"14.2.26-root.io.2"},{"fixed":"14.0.4-root.io.8"},{"fixed":"14.2.28-root.io.3"},{"fixed":"14.2.24-root.io.6"},{"fixed":"14.2.31-root.io.3"},{"fixed":"14.2.35-root.io.7"},{"fixed":"14.1.4-root.io.6"},{"fixed":"14.2.18-root.io.3"},{"fixed":"13.3.0-root.io.4"},{"fixed":"12.3.4-root.io.8"},{"fixed":"14.1.0-root.io.5"},{"fixed":"16.1.7-root.io.2"},{"fixed":"14.2.16-root.io.3"},{"fixed":"14.0.0-root.io.4"},{"fixed":"13.5.11-root.io.6"},{"fixed":"14.2.18-root.io.4"},{"fixed":"13.5.4-root.io.3"},{"fixed":"12.3.1-root.io.4"},{"fixed":"14.2.31-root.io.1"},{"fixed":"14.1.4-root.io.3"},{"fixed":"14.2.0-root.io.3"},{"fixed":"13.4.19-root.io.5"},{"fixed":"14.2.31-root.io.4"},{"fixed":"15.5.15-root.io.3"},{"fixed":"16.1.6-root.io.6"},{"fixed":"14.2.29-root.io.2"},{"fixed":"14.1.4-root.io.4"},{"fixed":"14.2.0-root.io.1"},{"fixed":"13.5.4-root.io.4"},{"fixed":"14.2.21-root.io.1"},{"fixed":"14.1.3-root.io.3"},{"fixed":"14.2.16-root.io.1"},{"fixed":"15.5.15-root.io.4"},{"fixed":"16.1.6-root.io.7"},{"fixed":"16.1.7-root.io.3"},{"fixed":"13.3.0-root.io.8"},{"fixed":"14.2.24-root.io.3"},{"fixed":"13.1.6-root.io.2"},{"fixed":"14.2.21-root.io.3"},{"fixed":"13.2.4-root.io.6"},{"fixed":"14.2.32-root.io.3"},{"fixed":"14.2.29-root.io.3"},{"fixed":"13.5.11-root.io.9"},{"fixed":"12.3.7-root.io.2"},{"fixed":"14.0.3-root.io.2"},{"fixed":"14.1.3-root.io.4"},{"fixed":"14.2.0-root.io.4"},{"fixed":"12.2.5-root.io.2"},{"fixed":"12.3.1-root.io.6"},{"fixed":"12.3.1-root.io.5"},{"fixed":"14.2.30-root.io.6"},{"fixed":"14.2.33-root.io.6"},{"fixed":"14.2.28-root.io.4"},{"fixed":"14.1.0-root.io.6"},{"fixed":"14.2.35-root.io.8"},{"fixed":"14.2.35-root.io.4"},{"fixed":"15.5.10-root.io.3"},{"fixed":"13.5.6-root.io.7"},{"fixed":"16.1.6-root.io.8"},{"fixed":"14.2.18-root.io.5"},{"fixed":"14.2.35-root.io.10"},{"fixed":"14.2.35-root.io.11"},{"fixed":"16.2.5-root.io.1"},{"fixed":"16.2.5-root.io.3"},{"fixed":"16.2.5-root.io.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-aikido.5"},{"fixed":"14.2.5-aikido.8"},{"fixed":"14.2.35-aikido.9"},{"fixed":"14.2.30-aikido.7"},{"fixed":"14.2.26-aikido.6"},{"fixed":"14.2.26-aikido.4"},{"fixed":"14.2.30-aikido.10"},{"fixed":"13.4.19-aikido.6"},{"fixed":"13.4.19-aikido.7"},{"fixed":"14.2.10-aikido.3"},{"fixed":"14.2.13-aikido.3"},{"fixed":"14.0.4-aikido.6"},{"fixed":"14.2.3-aikido.1"},{"fixed":"14.0.4-aikido.9"},{"fixed":"14.2.24-aikido.2"},{"fixed":"14.2.25-aikido.2"},{"fixed":"14.1.0-aikido.4"},{"fixed":"14.2.18-aikido.2"},{"fixed":"13.3.0-aikido.5"},{"fixed":"14.0.4-aikido.5"},{"fixed":"14.0.4-aikido.7"},{"fixed":"14.0.4-aikido.2"},{"fixed":"14.1.0-aikido.7"},{"fixed":"14.1.0-aikido.8"},{"fixed":"14.0.4-aikido.3"},{"fixed":"14.2.13-aikido.1"},{"fixed":"14.2.3-aikido.5"},{"fixed":"14.2.0-aikido.2"},{"fixed":"14.0.3-aikido.3"},{"fixed":"14.2.5-aikido.9"},{"fixed":"14.2.5-aikido.10"},{"fixed":"14.2.2-aikido.7"},{"fixed":"14.2.10-aikido.1"},{"fixed":"14.2.29-aikido.5"},{"fixed":"14.2.31-aikido.2"},{"fixed":"14.2.18-aikido.1"},{"fixed":"14.0.0-aikido.7"},{"fixed":"14.2.10-aikido.4"},{"fixed":"14.2.13-aikido.4"},{"fixed":"14.2.10-aikido.2"},{"fixed":"14.2.18-aikido.6"},{"fixed":"14.2.21-aikido.6"},{"fixed":"14.2.16-aikido.6"},{"fixed":"14.1.4-aikido.5"},{"fixed":"14.2.25-aikido.1"},{"fixed":"13.2.4-aikido.3"},{"fixed":"14.2.0-aikido.6"},{"fixed":"14.0.4-aikido.4"},{"fixed":"14.2.31-aikido.5"},{"fixed":"14.2.0-aikido.5"},{"fixed":"14.2.2-aikido.9"},{"fixed":"14.2.30-aikido.8"},{"fixed":"13.1.6-aikido.1"},{"fixed":"13.2.4-aikido.4"},{"fixed":"14.0.3-aikido.6"},{"fixed":"14.0.0-aikido.5"},{"fixed":"14.2.5-aikido.2"},{"fixed":"14.2.5-aikido.3"},{"fixed":"14.2.3-aikido.3"},{"fixed":"13.5.11-aikido.7"},{"fixed":"13.5.4-aikido.5"},{"fixed":"14.2.5-aikido.4"},{"fixed":"13.3.0-aikido.6"},{"fixed":"14.2.30-aikido.3"},{"fixed":"14.0.3-aikido.4"},{"fixed":"14.2.13-aikido.2"},{"fixed":"14.2.5-aikido.6"},{"fixed":"14.2.21-aikido.4"},{"fixed":"14.0.0-aikido.3"},{"fixed":"14.1.4-aikido.7"},{"fixed":"14.2.21-aikido.2"},{"fixed":"14.2.16-aikido.2"},{"fixed":"14.2.16-aikido.4"},{"fixed":"13.5.4-aikido.2"},{"fixed":"14.2.30-aikido.4"},{"fixed":"13.2.4-aikido.5"},{"fixed":"13.3.0-aikido.7"},{"fixed":"14.2.26-aikido.3"},{"fixed":"14.0.3-aikido.5"},{"fixed":"14.2.30-aikido.9"},{"fixed":"15.5.10-aikido.4"},{"fixed":"14.1.4-aikido.8"},{"fixed":"13.5.4-aikido.6"},{"fixed":"14.2.16-aikido.5"},{"fixed":"14.0.0-aikido.6"},{"fixed":"14.2.21-aikido.5"},{"fixed":"14.2.5-aikido.7"},{"fixed":"14.2.3-aikido.4"},{"fixed":"14.2.2-aikido.8"},{"fixed":"13.4.19-aikido.4"},{"fixed":"14.2.15-aikido.5"},{"fixed":"14.2.30-aikido.5"},{"fixed":"14.2.3-aikido.2"},{"fixed":"15.5.10-aikido.5"},{"fixed":"14.2.28-aikido.5"},{"fixed":"14.1.4-aikido.9"},{"fixed":"13.2.4-aikido.2"},{"fixed":"16.1.6-aikido.4"},{"fixed":"16.1.7-aikido.1"},{"fixed":"13.5.6-aikido.5"},{"fixed":"14.2.15-aikido.6"},{"fixed":"16.1.6-aikido.5"},{"fixed":"15.5.15-aikido.2"},{"fixed":"14.1.3-aikido.8"},{"fixed":"13.2.4-aikido.7"},{"fixed":"14.2.32-aikido.8"},{"fixed":"14.2.29-aikido.4"},{"fixed":"14.2.33-aikido.5"},{"fixed":"13.5.6-aikido.6"},{"fixed":"13.5.11-aikido.8"},{"fixed":"14.2.26-aikido.5"},{"fixed":"15.5.10-aikido.6"},{"fixed":"14.2.26-aikido.2"},{"fixed":"14.0.4-aikido.8"},{"fixed":"14.2.28-aikido.3"},{"fixed":"14.2.31-aikido.3"},{"fixed":"14.1.4-aikido.6"},{"fixed":"14.2.18-aikido.3"},{"fixed":"13.3.0-aikido.4"},{"fixed":"14.1.0-aikido.5"},{"fixed":"16.1.7-aikido.2"},{"fixed":"14.2.16-aikido.3"},{"fixed":"14.0.0-aikido.4"},{"fixed":"14.1.0-aikido.3"},{"fixed":"13.5.11-aikido.6"},{"fixed":"14.2.18-aikido.4"},{"fixed":"13.5.4-aikido.3"},{"fixed":"14.2.31-aikido.1"},{"fixed":"14.1.4-aikido.3"},{"fixed":"14.2.0-aikido.3"},{"fixed":"13.4.19-aikido.5"},{"fixed":"15.5.15-aikido.3"},{"fixed":"16.1.6-aikido.6"},{"fixed":"14.2.31-aikido.4"},{"fixed":"14.1.4-aikido.4"},{"fixed":"13.5.4-aikido.4"},{"fixed":"15.5.15-aikido.4"},{"fixed":"16.1.6-aikido.7"},{"fixed":"16.1.7-aikido.3"},{"fixed":"13.3.0-aikido.8"},{"fixed":"13.1.6-aikido.2"},{"fixed":"14.2.21-aikido.3"},{"fixed":"13.2.4-aikido.6"},{"fixed":"13.5.11-aikido.9"},{"fixed":"14.2.0-aikido.4"},{"fixed":"14.2.30-aikido.6"},{"fixed":"14.2.28-aikido.4"},{"fixed":"14.2.33-aikido.6"},{"fixed":"14.1.0-aikido.6"},{"fixed":"15.5.10-aikido.3"},{"fixed":"16.1.6-aikido.8"},{"fixed":"14.2.18-aikido.5"},{"fixed":"13.5.6-aikido.7"},{"fixed":"14.2.35-aikido.10"},{"fixed":"14.2.35-aikido.11"},{"fixed":"16.2.5-aikido.1"},{"fixed":"16.2.5-aikido.3"},{"fixed":"16.2.5-aikido.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-root.io.5"},{"fixed":"14.2.5-root.io.8"},{"fixed":"14.2.35-root.io.9"},{"fixed":"14.2.30-root.io.7"},{"fixed":"14.2.26-root.io.6"},{"fixed":"14.2.26-root.io.4"},{"fixed":"14.2.30-root.io.10"},{"fixed":"13.4.19-root.io.6"},{"fixed":"13.4.19-root.io.7"},{"fixed":"14.2.10-root.io.3"},{"fixed":"14.2.13-root.io.3"},{"fixed":"14.0.4-root.io.6"},{"fixed":"14.2.3-root.io.1"},{"fixed":"14.0.4-root.io.9"},{"fixed":"14.2.25-root.io.2"},{"fixed":"14.2.24-root.io.2"},{"fixed":"14.1.0-root.io.4"},{"fixed":"14.2.18-root.io.2"},{"fixed":"13.3.0-root.io.5"},{"fixed":"14.0.4-root.io.5"},{"fixed":"14.0.4-root.io.7"},{"fixed":"14.0.4-root.io.2"},{"fixed":"14.1.0-root.io.7"},{"fixed":"14.1.0-root.io.8"},{"fixed":"14.0.4-root.io.3"},{"fixed":"14.2.13-root.io.1"},{"fixed":"14.2.3-root.io.5"},{"fixed":"14.2.0-root.io.2"},{"fixed":"14.0.3-root.io.3"},{"fixed":"14.2.5-root.io.9"},{"fixed":"14.2.5-root.io.10"},{"fixed":"14.2.2-root.io.7"},{"fixed":"14.2.10-root.io.1"},{"fixed":"14.2.29-root.io.5"},{"fixed":"14.2.31-root.io.2"},{"fixed":"14.2.18-root.io.1"},{"fixed":"14.0.0-root.io.7"},{"fixed":"14.2.10-root.io.4"},{"fixed":"14.2.13-root.io.4"},{"fixed":"14.2.10-root.io.2"},{"fixed":"14.2.18-root.io.6"},{"fixed":"14.2.21-root.io.6"},{"fixed":"14.2.16-root.io.6"},{"fixed":"14.1.4-root.io.5"},{"fixed":"14.2.25-root.io.1"},{"fixed":"13.2.4-root.io.3"},{"fixed":"14.2.0-root.io.6"},{"fixed":"14.0.4-root.io.4"},{"fixed":"14.2.31-root.io.5"},{"fixed":"14.2.0-root.io.5"},{"fixed":"14.2.2-root.io.9"},{"fixed":"14.2.30-root.io.8"},{"fixed":"13.1.6-root.io.1"},{"fixed":"13.2.4-root.io.4"},{"fixed":"14.0.3-root.io.6"},{"fixed":"14.0.0-root.io.5"},{"fixed":"14.2.5-root.io.2"},{"fixed":"14.2.5-root.io.3"},{"fixed":"15.5.15-root.io.1"},{"fixed":"16.1.6-root.io.3"},{"fixed":"14.2.3-root.io.3"},{"fixed":"13.5.4-root.io.5"},{"fixed":"13.5.11-root.io.7"},{"fixed":"14.2.5-root.io.4"},{"fixed":"13.3.0-root.io.6"},{"fixed":"14.2.30-root.io.3"},{"fixed":"14.0.3-root.io.4"},{"fixed":"14.2.13-root.io.2"},{"fixed":"14.2.5-root.io.6"},{"fixed":"14.2.21-root.io.4"},{"fixed":"14.0.0-root.io.3"},{"fixed":"14.1.4-root.io.7"},{"fixed":"14.2.21-root.io.2"},{"fixed":"14.2.16-root.io.2"},{"fixed":"14.2.16-root.io.4"},{"fixed":"13.5.4-root.io.2"},{"fixed":"14.2.30-root.io.4"},{"fixed":"13.2.4-root.io.5"},{"fixed":"13.3.0-root.io.7"},{"fixed":"14.2.26-root.io.3"},{"fixed":"14.0.3-root.io.5"},{"fixed":"14.2.30-root.io.9"},{"fixed":"15.5.10-root.io.4"},{"fixed":"14.1.4-root.io.8"},{"fixed":"13.5.4-root.io.6"},{"fixed":"14.2.16-root.io.5"},{"fixed":"14.0.0-root.io.6"},{"fixed":"14.2.21-root.io.5"},{"fixed":"14.2.5-root.io.7"},{"fixed":"14.2.3-root.io.4"},{"fixed":"14.2.2-root.io.8"},{"fixed":"13.4.19-root.io.4"},{"fixed":"14.2.15-root.io.5"},{"fixed":"14.2.30-root.io.5"},{"fixed":"14.2.3-root.io.2"},{"fixed":"15.5.10-root.io.5"},{"fixed":"14.2.28-root.io.5"},{"fixed":"14.1.4-root.io.9"},{"fixed":"13.2.4-root.io.2"},{"fixed":"16.1.6-root.io.4"},{"fixed":"16.1.7-root.io.1"},{"fixed":"13.5.6-root.io.5"},{"fixed":"14.2.15-root.io.6"},{"fixed":"16.1.6-root.io.5"},{"fixed":"13.2.4-root.io.7"},{"fixed":"15.5.15-root.io.2"},{"fixed":"14.1.3-root.io.8"},{"fixed":"14.2.32-root.io.8"},{"fixed":"14.2.29-root.io.4"},{"fixed":"14.2.33-root.io.5"},{"fixed":"13.5.6-root.io.6"},{"fixed":"13.5.11-root.io.8"},{"fixed":"14.2.26-root.io.5"},{"fixed":"15.5.10-root.io.6"},{"fixed":"14.2.26-root.io.2"},{"fixed":"14.0.4-root.io.8"},{"fixed":"14.2.28-root.io.3"},{"fixed":"14.2.31-root.io.3"},{"fixed":"14.1.4-root.io.6"},{"fixed":"14.2.18-root.io.3"},{"fixed":"13.3.0-root.io.4"},{"fixed":"14.1.0-root.io.5"},{"fixed":"16.1.7-root.io.2"},{"fixed":"14.2.16-root.io.3"},{"fixed":"14.0.0-root.io.4"},{"fixed":"14.1.0-root.io.3"},{"fixed":"13.5.11-root.io.6"},{"fixed":"14.2.18-root.io.4"},{"fixed":"13.5.4-root.io.3"},{"fixed":"14.2.31-root.io.1"},{"fixed":"14.1.4-root.io.3"},{"fixed":"14.2.0-root.io.3"},{"fixed":"13.4.19-root.io.5"},{"fixed":"14.2.31-root.io.4"},{"fixed":"15.5.15-root.io.3"},{"fixed":"16.1.6-root.io.6"},{"fixed":"14.1.4-root.io.4"},{"fixed":"13.5.4-root.io.4"},{"fixed":"15.5.15-root.io.4"},{"fixed":"16.1.6-root.io.7"},{"fixed":"16.1.7-root.io.3"},{"fixed":"13.3.0-root.io.8"},{"fixed":"13.1.6-root.io.2"},{"fixed":"14.2.21-root.io.3"},{"fixed":"13.2.4-root.io.6"},{"fixed":"13.5.11-root.io.9"},{"fixed":"14.2.0-root.io.4"},{"fixed":"14.2.30-root.io.6"},{"fixed":"14.2.33-root.io.6"},{"fixed":"14.2.28-root.io.4"},{"fixed":"14.1.0-root.io.6"},{"fixed":"15.5.10-root.io.3"},{"fixed":"13.5.6-root.io.7"},{"fixed":"16.1.6-root.io.8"},{"fixed":"14.2.18-root.io.5"},{"fixed":"14.2.35-root.io.10"},{"fixed":"14.2.35-root.io.11"},{"fixed":"16.2.5-root.io.1"},{"fixed":"16.2.5-root.io.3"},{"fixed":"16.2.5-root.io.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-aikido.5"},{"fixed":"14.2.5-aikido.8"},{"fixed":"14.2.33-aikido.2"},{"fixed":"14.2.32-aikido.4"},{"fixed":"14.2.35-aikido.9"},{"fixed":"14.2.30-aikido.7"},{"fixed":"14.2.26-aikido.6"},{"fixed":"14.2.26-aikido.4"},{"fixed":"14.2.30-aikido.10"},{"fixed":"13.4.19-aikido.6"},{"fixed":"13.4.19-aikido.7"},{"fixed":"14.2.10-aikido.3"},{"fixed":"14.2.13-aikido.3"},{"fixed":"14.0.4-aikido.6"},{"fixed":"14.2.15-aikido.4"},{"fixed":"14.0.4-aikido.9"},{"fixed":"14.1.3-aikido.2"},{"fixed":"14.2.24-aikido.2"},{"fixed":"14.2.25-aikido.2"},{"fixed":"14.2.18-aikido.2"},{"fixed":"13.3.0-aikido.5"},{"fixed":"14.2.15-aikido.3"},{"fixed":"14.0.4-aikido.5"},{"fixed":"14.0.4-aikido.7"},{"fixed":"14.0.4-aikido.2"},{"fixed":"14.1.0-aikido.7"},{"fixed":"14.1.0-aikido.8"},{"fixed":"14.0.4-aikido.3"},{"fixed":"14.2.13-aikido.1"},{"fixed":"14.2.32-aikido.1"},{"fixed":"14.2.3-aikido.5"},{"fixed":"14.2.0-aikido.2"},{"fixed":"14.0.3-aikido.3"},{"fixed":"14.2.5-aikido.9"},{"fixed":"14.2.5-aikido.10"},{"fixed":"14.2.2-aikido.7"},{"fixed":"14.2.33-aikido.1"},{"fixed":"14.1.3-aikido.5"},{"fixed":"14.2.29-aikido.1"},{"fixed":"14.2.29-aikido.5"},{"fixed":"14.2.31-aikido.2"},{"fixed":"14.0.0-aikido.7"},{"fixed":"14.2.10-aikido.4"},{"fixed":"14.2.13-aikido.4"},{"fixed":"14.2.18-aikido.6"},{"fixed":"14.2.21-aikido.6"},{"fixed":"14.2.16-aikido.6"},{"fixed":"14.1.4-aikido.5"},{"fixed":"14.2.25-aikido.1"},{"fixed":"13.2.4-aikido.3"},{"fixed":"14.2.0-aikido.6"},{"fixed":"14.0.4-aikido.4"},{"fixed":"14.2.31-aikido.5"},{"fixed":"14.2.0-aikido.5"},{"fixed":"14.2.2-aikido.9"},{"fixed":"14.2.30-aikido.8"},{"fixed":"13.1.6-aikido.1"},{"fixed":"13.2.4-aikido.4"},{"fixed":"14.0.3-aikido.6"},{"fixed":"14.2.32-aikido.5"},{"fixed":"14.2.33-aikido.3"},{"fixed":"14.0.0-aikido.5"},{"fixed":"14.2.5-aikido.3"},{"fixed":"14.2.3-aikido.3"},{"fixed":"14.2.2-aikido.5"},{"fixed":"13.5.11-aikido.7"},{"fixed":"14.2.2-aikido.6"},{"fixed":"14.2.30-aikido.1"},{"fixed":"13.5.4-aikido.5"},{"fixed":"14.2.30-aikido.2"},{"fixed":"14.1.3-aikido.6"},{"fixed":"14.2.5-aikido.4"},{"fixed":"13.3.0-aikido.6"},{"fixed":"14.2.30-aikido.3"},{"fixed":"14.0.3-aikido.4"},{"fixed":"14.2.13-aikido.2"},{"fixed":"14.2.5-aikido.6"},{"fixed":"14.2.21-aikido.4"},{"fixed":"14.0.0-aikido.3"},{"fixed":"14.1.4-aikido.7"},{"fixed":"14.2.21-aikido.2"},{"fixed":"14.2.16-aikido.2"},{"fixed":"14.2.16-aikido.4"},{"fixed":"13.5.4-aikido.2"},{"fixed":"14.2.35-aikido.5"},{"fixed":"14.2.30-aikido.4"},{"fixed":"13.2.4-aikido.5"},{"fixed":"13.3.0-aikido.7"},{"fixed":"14.2.33-aikido.4"},{"fixed":"14.2.26-aikido.3"},{"fixed":"14.0.3-aikido.5"},{"fixed":"14.2.30-aikido.9"},{"fixed":"14.1.4-aikido.8"},{"fixed":"14.2.35-aikido.3"},{"fixed":"14.2.32-aikido.6"},{"fixed":"14.2.35-aikido.6"},{"fixed":"13.5.4-aikido.6"},{"fixed":"14.1.3-aikido.7"},{"fixed":"14.2.16-aikido.5"},{"fixed":"14.0.0-aikido.6"},{"fixed":"14.2.21-aikido.5"},{"fixed":"14.2.5-aikido.7"},{"fixed":"14.2.3-aikido.4"},{"fixed":"14.2.2-aikido.8"},{"fixed":"13.4.19-aikido.4"},{"fixed":"14.2.15-aikido.5"},{"fixed":"14.2.30-aikido.5"},{"fixed":"14.2.3-aikido.2"},{"fixed":"14.2.28-aikido.5"},{"fixed":"14.2.32-aikido.2"},{"fixed":"14.1.4-aikido.9"},{"fixed":"14.2.32-aikido.7"},{"fixed":"13.5.6-aikido.5"},{"fixed":"14.2.15-aikido.6"},{"fixed":"14.1.3-aikido.8"},{"fixed":"13.2.4-aikido.7"},{"fixed":"14.2.32-aikido.8"},{"fixed":"14.2.29-aikido.4"},{"fixed":"14.2.28-aikido.1"},{"fixed":"14.2.35-aikido.2"},{"fixed":"14.2.33-aikido.5"},{"fixed":"13.5.6-aikido.6"},{"fixed":"13.5.11-aikido.8"},{"fixed":"14.2.26-aikido.5"},{"fixed":"14.2.28-aikido.2"},{"fixed":"14.2.26-aikido.2"},{"fixed":"14.0.4-aikido.8"},{"fixed":"14.2.28-aikido.3"},{"fixed":"14.2.31-aikido.3"},{"fixed":"14.1.4-aikido.6"},{"fixed":"14.2.35-aikido.7"},{"fixed":"14.2.18-aikido.3"},{"fixed":"14.1.0-aikido.5"},{"fixed":"14.2.16-aikido.3"},{"fixed":"14.0.0-aikido.4"},{"fixed":"14.2.18-aikido.4"},{"fixed":"13.5.4-aikido.3"},{"fixed":"14.2.0-aikido.3"},{"fixed":"13.4.19-aikido.5"},{"fixed":"14.0.0-aikido.2"},{"fixed":"14.2.31-aikido.4"},{"fixed":"14.2.29-aikido.2"},{"fixed":"13.5.4-aikido.4"},{"fixed":"14.2.21-aikido.1"},{"fixed":"14.2.16-aikido.1"},{"fixed":"14.1.3-aikido.3"},{"fixed":"13.3.0-aikido.8"},{"fixed":"13.1.6-aikido.2"},{"fixed":"14.2.21-aikido.3"},{"fixed":"13.2.4-aikido.6"},{"fixed":"14.2.32-aikido.3"},{"fixed":"14.2.29-aikido.3"},{"fixed":"13.5.11-aikido.9"},{"fixed":"14.1.3-aikido.4"},{"fixed":"14.2.0-aikido.4"},{"fixed":"14.2.30-aikido.6"},{"fixed":"14.2.28-aikido.4"},{"fixed":"14.2.33-aikido.6"},{"fixed":"14.1.0-aikido.6"},{"fixed":"14.2.35-aikido.8"},{"fixed":"14.2.35-aikido.4"},{"fixed":"14.2.35-aikido.1"},{"fixed":"14.2.18-aikido.5"},{"fixed":"13.5.6-aikido.7"},{"fixed":"14.2.35-aikido.10"},{"fixed":"14.2.35-aikido.11"},{"fixed":"15.5.10-aikido.4"},{"fixed":"15.5.10-aikido.5"},{"fixed":"15.5.10-aikido.6"},{"fixed":"15.5.10-aikido.3"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-root.io.5"},{"fixed":"14.2.5-root.io.8"},{"fixed":"14.2.33-root.io.2"},{"fixed":"14.2.32-root.io.4"},{"fixed":"14.2.35-root.io.9"},{"fixed":"14.2.30-root.io.7"},{"fixed":"14.2.26-root.io.6"},{"fixed":"14.2.26-root.io.4"},{"fixed":"14.2.30-root.io.10"},{"fixed":"13.4.19-root.io.6"},{"fixed":"13.4.19-root.io.7"},{"fixed":"14.2.10-root.io.3"},{"fixed":"14.2.13-root.io.3"},{"fixed":"14.0.4-root.io.6"},{"fixed":"14.2.15-root.io.4"},{"fixed":"14.0.4-root.io.9"},{"fixed":"14.1.3-root.io.2"},{"fixed":"14.2.25-root.io.2"},{"fixed":"14.2.24-root.io.2"},{"fixed":"14.2.18-root.io.2"},{"fixed":"13.3.0-root.io.5"},{"fixed":"14.2.15-root.io.3"},{"fixed":"14.0.4-root.io.5"},{"fixed":"14.0.4-root.io.7"},{"fixed":"14.0.4-root.io.2"},{"fixed":"14.1.0-root.io.7"},{"fixed":"14.1.0-root.io.8"},{"fixed":"14.0.4-root.io.3"},{"fixed":"14.2.13-root.io.1"},{"fixed":"14.2.32-root.io.1"},{"fixed":"14.2.3-root.io.5"},{"fixed":"14.2.0-root.io.2"},{"fixed":"14.0.3-root.io.3"},{"fixed":"14.2.5-root.io.9"},{"fixed":"14.2.5-root.io.10"},{"fixed":"14.2.2-root.io.7"},{"fixed":"14.2.33-root.io.1"},{"fixed":"14.1.3-root.io.5"},{"fixed":"14.2.29-root.io.1"},{"fixed":"14.2.29-root.io.5"},{"fixed":"14.2.31-root.io.2"},{"fixed":"14.0.0-root.io.7"},{"fixed":"14.2.10-root.io.4"},{"fixed":"14.2.13-root.io.4"},{"fixed":"14.2.18-root.io.6"},{"fixed":"14.2.21-root.io.6"},{"fixed":"14.2.16-root.io.6"},{"fixed":"14.1.4-root.io.5"},{"fixed":"14.2.25-root.io.1"},{"fixed":"13.2.4-root.io.3"},{"fixed":"14.2.0-root.io.6"},{"fixed":"14.0.4-root.io.4"},{"fixed":"14.2.31-root.io.5"},{"fixed":"14.2.0-root.io.5"},{"fixed":"14.2.2-root.io.9"},{"fixed":"14.2.30-root.io.8"},{"fixed":"13.1.6-root.io.1"},{"fixed":"13.2.4-root.io.4"},{"fixed":"14.0.3-root.io.6"},{"fixed":"14.2.32-root.io.5"},{"fixed":"14.2.33-root.io.3"},{"fixed":"14.0.0-root.io.5"},{"fixed":"14.2.5-root.io.3"},{"fixed":"14.2.3-root.io.3"},{"fixed":"13.5.4-root.io.5"},{"fixed":"14.2.2-root.io.5"},{"fixed":"13.5.11-root.io.7"},{"fixed":"14.2.2-root.io.6"},{"fixed":"14.2.30-root.io.1"},{"fixed":"14.2.30-root.io.2"},{"fixed":"14.1.3-root.io.6"},{"fixed":"14.2.5-root.io.4"},{"fixed":"13.3.0-root.io.6"},{"fixed":"14.2.30-root.io.3"},{"fixed":"14.0.3-root.io.4"},{"fixed":"14.2.13-root.io.2"},{"fixed":"14.2.5-root.io.6"},{"fixed":"14.2.21-root.io.4"},{"fixed":"14.0.0-root.io.3"},{"fixed":"14.1.4-root.io.7"},{"fixed":"14.2.21-root.io.2"},{"fixed":"14.2.16-root.io.2"},{"fixed":"14.2.16-root.io.4"},{"fixed":"13.5.4-root.io.2"},{"fixed":"14.2.35-root.io.5"},{"fixed":"14.2.30-root.io.4"},{"fixed":"13.2.4-root.io.5"},{"fixed":"13.3.0-root.io.7"},{"fixed":"14.2.33-root.io.4"},{"fixed":"14.2.26-root.io.3"},{"fixed":"14.0.3-root.io.5"},{"fixed":"14.2.30-root.io.9"},{"fixed":"14.1.4-root.io.8"},{"fixed":"14.2.35-root.io.3"},{"fixed":"14.2.32-root.io.6"},{"fixed":"14.2.35-root.io.6"},{"fixed":"13.5.4-root.io.6"},{"fixed":"14.1.3-root.io.7"},{"fixed":"14.2.16-root.io.5"},{"fixed":"14.0.0-root.io.6"},{"fixed":"14.2.21-root.io.5"},{"fixed":"14.2.5-root.io.7"},{"fixed":"14.2.3-root.io.4"},{"fixed":"14.2.2-root.io.8"},{"fixed":"13.4.19-root.io.4"},{"fixed":"14.2.15-root.io.5"},{"fixed":"14.2.30-root.io.5"},{"fixed":"14.2.3-root.io.2"},{"fixed":"14.2.28-root.io.5"},{"fixed":"14.2.32-root.io.2"},{"fixed":"14.1.4-root.io.9"},{"fixed":"14.2.32-root.io.7"},{"fixed":"13.5.6-root.io.5"},{"fixed":"14.2.15-root.io.6"},{"fixed":"13.2.4-root.io.7"},{"fixed":"14.1.3-root.io.8"},{"fixed":"14.2.32-root.io.8"},{"fixed":"14.2.29-root.io.4"},{"fixed":"14.2.28-root.io.1"},{"fixed":"14.2.33-root.io.5"},{"fixed":"14.2.35-root.io.2"},{"fixed":"13.5.6-root.io.6"},{"fixed":"13.5.11-root.io.8"},{"fixed":"14.2.26-root.io.5"},{"fixed":"14.2.28-root.io.2"},{"fixed":"14.2.26-root.io.2"},{"fixed":"14.0.4-root.io.8"},{"fixed":"14.2.28-root.io.3"},{"fixed":"14.2.31-root.io.3"},{"fixed":"14.2.35-root.io.7"},{"fixed":"14.1.4-root.io.6"},{"fixed":"14.2.18-root.io.3"},{"fixed":"14.1.0-root.io.5"},{"fixed":"14.2.16-root.io.3"},{"fixed":"14.0.0-root.io.4"},{"fixed":"14.2.18-root.io.4"},{"fixed":"13.5.4-root.io.3"},{"fixed":"14.2.0-root.io.3"},{"fixed":"13.4.19-root.io.5"},{"fixed":"14.0.0-root.io.2"},{"fixed":"14.2.31-root.io.4"},{"fixed":"14.2.29-root.io.2"},{"fixed":"13.5.4-root.io.4"},{"fixed":"14.2.21-root.io.1"},{"fixed":"14.1.3-root.io.3"},{"fixed":"14.2.16-root.io.1"},{"fixed":"13.3.0-root.io.8"},{"fixed":"13.1.6-root.io.2"},{"fixed":"14.2.21-root.io.3"},{"fixed":"13.2.4-root.io.6"},{"fixed":"14.2.32-root.io.3"},{"fixed":"14.2.29-root.io.3"},{"fixed":"13.5.11-root.io.9"},{"fixed":"14.1.3-root.io.4"},{"fixed":"14.2.0-root.io.4"},{"fixed":"14.2.30-root.io.6"},{"fixed":"14.2.33-root.io.6"},{"fixed":"14.2.28-root.io.4"},{"fixed":"14.1.0-root.io.6"},{"fixed":"14.2.35-root.io.8"},{"fixed":"14.2.35-root.io.4"},{"fixed":"13.5.6-root.io.7"},{"fixed":"14.2.35-root.io.1"},{"fixed":"14.2.18-root.io.5"},{"fixed":"14.2.35-root.io.10"},{"fixed":"14.2.35-root.io.11"},{"fixed":"15.5.10-root.io.4"},{"fixed":"15.5.10-root.io.5"},{"fixed":"15.5.10-root.io.6"},{"fixed":"15.5.10-root.io.3"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-aikido.8"},{"fixed":"14.2.33-aikido.2"},{"fixed":"14.2.32-aikido.4"},{"fixed":"14.2.35-aikido.9"},{"fixed":"14.2.30-aikido.7"},{"fixed":"14.2.26-aikido.6"},{"fixed":"14.2.26-aikido.4"},{"fixed":"14.2.30-aikido.10"},{"fixed":"13.4.19-aikido.6"},{"fixed":"13.4.19-aikido.7"},{"fixed":"14.2.10-aikido.3"},{"fixed":"14.2.13-aikido.3"},{"fixed":"14.0.4-aikido.6"},{"fixed":"14.0.4-aikido.9"},{"fixed":"13.4.19-aikido.2"},{"fixed":"14.1.3-aikido.2"},{"fixed":"14.2.24-aikido.2"},{"fixed":"14.2.25-aikido.2"},{"fixed":"14.1.0-aikido.4"},{"fixed":"13.3.0-aikido.5"},{"fixed":"13.4.19-aikido.3"},{"fixed":"14.0.4-aikido.5"},{"fixed":"14.0.4-aikido.7"},{"fixed":"14.1.0-aikido.7"},{"fixed":"14.1.0-aikido.8"},{"fixed":"14.2.32-aikido.1"},{"fixed":"14.2.3-aikido.5"},{"fixed":"14.0.3-aikido.3"},{"fixed":"14.2.5-aikido.9"},{"fixed":"14.2.5-aikido.10"},{"fixed":"14.2.2-aikido.7"},{"fixed":"14.2.33-aikido.1"},{"fixed":"14.1.3-aikido.5"},{"fixed":"14.2.29-aikido.1"},{"fixed":"14.2.29-aikido.5"},{"fixed":"14.2.31-aikido.2"},{"fixed":"14.0.0-aikido.7"},{"fixed":"14.2.10-aikido.4"},{"fixed":"14.2.13-aikido.4"},{"fixed":"14.2.18-aikido.6"},{"fixed":"14.2.21-aikido.6"},{"fixed":"14.2.16-aikido.6"},{"fixed":"14.2.25-aikido.1"},{"fixed":"14.2.0-aikido.6"},{"fixed":"14.2.31-aikido.5"},{"fixed":"14.2.2-aikido.9"},{"fixed":"14.2.30-aikido.8"},{"fixed":"13.1.6-aikido.1"},{"fixed":"14.2.24-aikido.7"},{"fixed":"14.2.24-aikido.4"},{"fixed":"14.0.3-aikido.6"},{"fixed":"14.2.32-aikido.5"},{"fixed":"14.2.33-aikido.3"},{"fixed":"14.0.0-aikido.5"},{"fixed":"14.2.3-aikido.3"},{"fixed":"14.2.2-aikido.4"},{"fixed":"14.2.2-aikido.5"},{"fixed":"13.5.11-aikido.7"},{"fixed":"14.2.2-aikido.6"},{"fixed":"13.5.4-aikido.5"},{"fixed":"14.0.0-aikido.1"},{"fixed":"14.1.3-aikido.6"},{"fixed":"13.3.0-aikido.1"},{"fixed":"13.3.0-aikido.6"},{"fixed":"13.4.19-aikido.1"},{"fixed":"14.0.3-aikido.4"},{"fixed":"13.5.11-aikido.4"},{"fixed":"14.0.3-aikido.1"},{"fixed":"14.2.21-aikido.4"},{"fixed":"13.5.6-aikido.1"},{"fixed":"14.0.0-aikido.3"},{"fixed":"14.1.4-aikido.7"},{"fixed":"13.5.4-aikido.1"},{"fixed":"14.2.21-aikido.2"},{"fixed":"13.3.0-aikido.2"},{"fixed":"14.2.16-aikido.2"},{"fixed":"14.2.16-aikido.4"},{"fixed":"13.5.4-aikido.2"},{"fixed":"14.2.35-aikido.5"},{"fixed":"13.5.6-aikido.2"},{"fixed":"14.2.30-aikido.4"},{"fixed":"13.3.0-aikido.7"},{"fixed":"14.2.33-aikido.4"},{"fixed":"14.2.26-aikido.3"},{"fixed":"14.0.3-aikido.5"},{"fixed":"14.2.30-aikido.9"},{"fixed":"15.5.10-aikido.4"},{"fixed":"14.1.4-aikido.8"},{"fixed":"14.2.35-aikido.3"},{"fixed":"14.2.32-aikido.6"},{"fixed":"14.2.35-aikido.6"},{"fixed":"13.5.4-aikido.6"},{"fixed":"14.2.24-aikido.5"},{"fixed":"14.1.3-aikido.7"},{"fixed":"14.2.16-aikido.5"},{"fixed":"14.0.0-aikido.6"},{"fixed":"14.2.21-aikido.5"},{"fixed":"14.2.3-aikido.4"},{"fixed":"14.2.2-aikido.8"},{"fixed":"13.4.19-aikido.4"},{"fixed":"14.2.15-aikido.5"},{"fixed":"14.2.30-aikido.5"},{"fixed":"14.2.3-aikido.2"},{"fixed":"13.5.6-aikido.3"},{"fixed":"13.5.6-aikido.4"},{"fixed":"15.5.10-aikido.5"},{"fixed":"14.2.28-aikido.5"},{"fixed":"14.2.24-aikido.1"},{"fixed":"14.2.32-aikido.2"},{"fixed":"14.1.4-aikido.9"},{"fixed":"16.1.6-aikido.4"},{"fixed":"14.1.3-aikido.1"},{"fixed":"16.1.7-aikido.1"},{"fixed":"13.3.0-aikido.3"},{"fixed":"14.2.32-aikido.7"},{"fixed":"13.5.6-aikido.5"},{"fixed":"14.2.15-aikido.6"},{"fixed":"16.1.6-aikido.5"},{"fixed":"14.1.3-aikido.8"},{"fixed":"13.2.4-aikido.7"},{"fixed":"14.2.32-aikido.8"},{"fixed":"14.2.29-aikido.4"},{"fixed":"14.2.35-aikido.2"},{"fixed":"14.2.33-aikido.5"},{"fixed":"13.5.6-aikido.6"},{"fixed":"13.5.11-aikido.8"},{"fixed":"14.2.26-aikido.5"},{"fixed":"15.5.10-aikido.6"},{"fixed":"14.0.4-aikido.8"},{"fixed":"14.2.28-aikido.3"},{"fixed":"14.2.31-aikido.3"},{"fixed":"14.2.24-aikido.6"},{"fixed":"14.1.4-aikido.6"},{"fixed":"14.2.35-aikido.7"},{"fixed":"14.2.18-aikido.3"},{"fixed":"13.3.0-aikido.4"},{"fixed":"14.1.0-aikido.5"},{"fixed":"16.1.7-aikido.2"},{"fixed":"14.2.16-aikido.3"},{"fixed":"14.0.0-aikido.4"},{"fixed":"13.5.11-aikido.5"},{"fixed":"14.1.0-aikido.3"},{"fixed":"13.5.11-aikido.6"},{"fixed":"14.2.18-aikido.4"},{"fixed":"13.5.4-aikido.3"},{"fixed":"13.4.19-aikido.5"},{"fixed":"14.0.0-aikido.2"},{"fixed":"16.1.6-aikido.6"},{"fixed":"14.2.31-aikido.4"},{"fixed":"14.2.29-aikido.2"},{"fixed":"13.5.4-aikido.4"},{"fixed":"14.2.21-aikido.1"},{"fixed":"16.1.6-aikido.7"},{"fixed":"16.1.7-aikido.3"},{"fixed":"14.1.3-aikido.3"},{"fixed":"13.3.0-aikido.8"},{"fixed":"14.2.24-aikido.3"},{"fixed":"13.1.6-aikido.2"},{"fixed":"14.2.21-aikido.3"},{"fixed":"14.2.32-aikido.3"},{"fixed":"14.2.29-aikido.3"},{"fixed":"13.5.11-aikido.9"},{"fixed":"14.0.3-aikido.2"},{"fixed":"14.1.3-aikido.4"},{"fixed":"14.2.30-aikido.6"},{"fixed":"14.2.28-aikido.4"},{"fixed":"14.2.33-aikido.6"},{"fixed":"14.1.0-aikido.6"},{"fixed":"14.2.35-aikido.8"},{"fixed":"14.2.35-aikido.4"},{"fixed":"15.5.10-aikido.3"},{"fixed":"16.1.6-aikido.8"},{"fixed":"14.2.18-aikido.5"},{"fixed":"13.5.6-aikido.7"},{"fixed":"14.2.35-aikido.10"},{"fixed":"14.2.35-aikido.11"},{"fixed":"15.5.15-aikido.2"},{"fixed":"15.5.15-aikido.3"},{"fixed":"15.5.15-aikido.4"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-root.io.8"},{"fixed":"14.2.33-root.io.2"},{"fixed":"14.2.32-root.io.4"},{"fixed":"14.2.35-root.io.9"},{"fixed":"14.2.30-root.io.7"},{"fixed":"14.2.26-root.io.6"},{"fixed":"14.2.26-root.io.4"},{"fixed":"14.2.30-root.io.10"},{"fixed":"13.4.19-root.io.6"},{"fixed":"13.4.19-root.io.7"},{"fixed":"14.2.10-root.io.3"},{"fixed":"14.2.13-root.io.3"},{"fixed":"14.0.4-root.io.6"},{"fixed":"14.0.4-root.io.9"},{"fixed":"13.4.19-root.io.2"},{"fixed":"14.1.3-root.io.2"},{"fixed":"14.2.25-root.io.2"},{"fixed":"14.2.24-root.io.2"},{"fixed":"14.1.0-root.io.4"},{"fixed":"13.3.0-root.io.5"},{"fixed":"14.0.4-root.io.5"},{"fixed":"13.4.19-root.io.3"},{"fixed":"14.0.4-root.io.7"},{"fixed":"14.1.0-root.io.7"},{"fixed":"14.1.0-root.io.8"},{"fixed":"14.2.32-root.io.1"},{"fixed":"14.2.3-root.io.5"},{"fixed":"14.0.3-root.io.3"},{"fixed":"14.2.5-root.io.9"},{"fixed":"14.2.5-root.io.10"},{"fixed":"14.2.2-root.io.7"},{"fixed":"14.2.33-root.io.1"},{"fixed":"14.1.3-root.io.5"},{"fixed":"14.2.29-root.io.1"},{"fixed":"14.2.29-root.io.5"},{"fixed":"14.2.31-root.io.2"},{"fixed":"14.0.0-root.io.7"},{"fixed":"14.2.10-root.io.4"},{"fixed":"14.2.13-root.io.4"},{"fixed":"14.2.18-root.io.6"},{"fixed":"14.2.21-root.io.6"},{"fixed":"14.2.16-root.io.6"},{"fixed":"14.2.25-root.io.1"},{"fixed":"14.2.0-root.io.6"},{"fixed":"14.2.31-root.io.5"},{"fixed":"14.2.2-root.io.9"},{"fixed":"14.2.30-root.io.8"},{"fixed":"13.1.6-root.io.1"},{"fixed":"14.2.24-root.io.7"},{"fixed":"14.2.24-root.io.4"},{"fixed":"14.0.3-root.io.6"},{"fixed":"14.2.32-root.io.5"},{"fixed":"14.2.33-root.io.3"},{"fixed":"14.0.0-root.io.5"},{"fixed":"16.1.6-root.io.1"},{"fixed":"16.1.6-root.io.2"},{"fixed":"16.1.6-root.io.3"},{"fixed":"14.2.3-root.io.3"},{"fixed":"14.2.2-root.io.4"},{"fixed":"13.5.4-root.io.5"},{"fixed":"14.2.2-root.io.5"},{"fixed":"13.5.11-root.io.7"},{"fixed":"14.2.2-root.io.6"},{"fixed":"14.0.0-root.io.1"},{"fixed":"14.1.3-root.io.6"},{"fixed":"13.3.0-root.io.1"},{"fixed":"13.3.0-root.io.6"},{"fixed":"13.4.19-root.io.1"},{"fixed":"14.0.3-root.io.4"},{"fixed":"13.5.11-root.io.4"},{"fixed":"14.0.3-root.io.1"},{"fixed":"14.2.21-root.io.4"},{"fixed":"13.5.6-root.io.1"},{"fixed":"14.0.0-root.io.3"},{"fixed":"14.1.4-root.io.7"},{"fixed":"13.5.4-root.io.1"},{"fixed":"14.2.21-root.io.2"},{"fixed":"13.3.0-root.io.2"},{"fixed":"14.2.16-root.io.2"},{"fixed":"14.2.16-root.io.4"},{"fixed":"13.5.4-root.io.2"},{"fixed":"14.2.35-root.io.5"},{"fixed":"13.5.6-root.io.2"},{"fixed":"14.2.30-root.io.4"},{"fixed":"13.3.0-root.io.7"},{"fixed":"14.2.33-root.io.4"},{"fixed":"14.2.26-root.io.3"},{"fixed":"14.0.3-root.io.5"},{"fixed":"14.2.30-root.io.9"},{"fixed":"15.5.10-root.io.4"},{"fixed":"14.1.4-root.io.8"},{"fixed":"14.2.35-root.io.3"},{"fixed":"14.2.32-root.io.6"},{"fixed":"14.2.35-root.io.6"},{"fixed":"13.5.4-root.io.6"},{"fixed":"14.2.24-root.io.5"},{"fixed":"14.1.3-root.io.7"},{"fixed":"14.2.16-root.io.5"},{"fixed":"14.0.0-root.io.6"},{"fixed":"14.2.21-root.io.5"},{"fixed":"14.2.3-root.io.4"},{"fixed":"14.2.2-root.io.8"},{"fixed":"13.4.19-root.io.4"},{"fixed":"14.2.15-root.io.5"},{"fixed":"14.2.30-root.io.5"},{"fixed":"14.2.3-root.io.2"},{"fixed":"13.5.6-root.io.3"},{"fixed":"13.5.6-root.io.4"},{"fixed":"15.5.10-root.io.5"},{"fixed":"14.2.28-root.io.5"},{"fixed":"14.2.24-root.io.1"},{"fixed":"14.2.32-root.io.2"},{"fixed":"14.1.4-root.io.9"},{"fixed":"16.1.6-root.io.4"},{"fixed":"14.1.3-root.io.1"},{"fixed":"16.1.7-root.io.1"},{"fixed":"13.3.0-root.io.3"},{"fixed":"14.2.32-root.io.7"},{"fixed":"13.5.6-root.io.5"},{"fixed":"14.2.15-root.io.6"},{"fixed":"16.1.6-root.io.5"},{"fixed":"13.2.4-root.io.7"},{"fixed":"14.1.3-root.io.8"},{"fixed":"14.2.32-root.io.8"},{"fixed":"14.2.29-root.io.4"},{"fixed":"14.2.33-root.io.5"},{"fixed":"14.2.35-root.io.2"},{"fixed":"13.5.6-root.io.6"},{"fixed":"13.5.11-root.io.8"},{"fixed":"14.2.26-root.io.5"},{"fixed":"15.5.10-root.io.6"},{"fixed":"14.0.4-root.io.8"},{"fixed":"14.2.28-root.io.3"},{"fixed":"14.2.24-root.io.6"},{"fixed":"14.2.31-root.io.3"},{"fixed":"14.2.35-root.io.7"},{"fixed":"14.1.4-root.io.6"},{"fixed":"14.2.18-root.io.3"},{"fixed":"13.3.0-root.io.4"},{"fixed":"14.1.0-root.io.5"},{"fixed":"16.1.7-root.io.2"},{"fixed":"14.2.16-root.io.3"},{"fixed":"14.0.0-root.io.4"},{"fixed":"13.5.11-root.io.5"},{"fixed":"14.1.0-root.io.3"},{"fixed":"13.5.11-root.io.6"},{"fixed":"14.2.18-root.io.4"},{"fixed":"13.5.4-root.io.3"},{"fixed":"13.4.19-root.io.5"},{"fixed":"14.0.0-root.io.2"},{"fixed":"14.2.31-root.io.4"},{"fixed":"16.1.6-root.io.6"},{"fixed":"14.2.29-root.io.2"},{"fixed":"13.5.4-root.io.4"},{"fixed":"14.2.21-root.io.1"},{"fixed":"14.1.3-root.io.3"},{"fixed":"16.1.6-root.io.7"},{"fixed":"16.1.7-root.io.3"},{"fixed":"13.3.0-root.io.8"},{"fixed":"14.2.24-root.io.3"},{"fixed":"13.1.6-root.io.2"},{"fixed":"14.2.21-root.io.3"},{"fixed":"14.2.32-root.io.3"},{"fixed":"14.2.29-root.io.3"},{"fixed":"13.5.11-root.io.9"},{"fixed":"14.0.3-root.io.2"},{"fixed":"14.1.3-root.io.4"},{"fixed":"14.2.30-root.io.6"},{"fixed":"14.2.33-root.io.6"},{"fixed":"14.2.28-root.io.4"},{"fixed":"14.1.0-root.io.6"},{"fixed":"14.2.35-root.io.8"},{"fixed":"14.2.35-root.io.4"},{"fixed":"15.5.10-root.io.3"},{"fixed":"13.5.6-root.io.7"},{"fixed":"16.1.6-root.io.8"},{"fixed":"14.2.18-root.io.5"},{"fixed":"14.2.35-root.io.10"},{"fixed":"14.2.35-root.io.11"},{"fixed":"15.5.15-root.io.1"},{"fixed":"15.5.15-root.io.2"},{"fixed":"15.5.15-root.io.3"},{"fixed":"15.5.15-root.io.4"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux ai (rhel ai) 3"},{"vendor":"red hat","product":"red hat trusted artifact signer 1.3"},{"vendor":"red hat","product":"red hat trusted artifact signer 1.4"},{"vendor":"red hat","product":"streams for apache kafka 2.9.4"},{"vendor":"red hat","product":"streams for apache kafka 3"},{"vendor":"vercel","product":"next.js"}],"references":[{"url":"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44573","tags":["vdb-entry","x_refsource_REDHAT","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477199","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44573.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:40974","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:37272","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:34608","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54435","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://github.com/vercel/next.js/releases/tag/v15.5.16","tags":["web"]},{"url":"https://github.com/vercel/next.js/releases/tag/v16.2.5","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44573","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-36qx-fr4f-26g5"},{"url":"https://github.com/facebook/react/security/advisories/GHSA-rv78-f8rc-xrxh","tags":["web"]},{"url":"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj","tags":["web"]},{"url":"https://github.com/vitejs/vite-plugin-react/security/advisories/GHSA-w94c-4vhp-22gx","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23870","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8h8q-6873-q5fj"},{"url":"https://github.com/facebook/react/security/advisories/GHSA-83fc-fqcc-2hmg","tags":["web"]},{"url":"https://github.com/vercel/next.js/security/advisories/GHSA-h25m-26qc-wcjf","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23864","tags":["advisory"]},{"url":"https://vercel.com/changelog/summary-of-cve-2026-23864","tags":["web"]},{"url":"https://github.com/advisories/GHSA-h25m-26qc-wcjf"},{"url":"https://github.com/vercel/next.js/security/advisories/GHSA-q4gf-8mx6-v5v3","tags":["web"]},{"url":"https://vercel.com/changelog/summary-of-cve-2026-23869","tags":["web"]},{"url":"https://github.com/advisories/GHSA-q4gf-8mx6-v5v3"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44573.json","tags":["advisory"]},{"url":"https://github.com/vercel/next.js","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2026-44573","title":"Next.js: Middleware / Proxy bypass in Pages Router applications using i18n","description":"Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router with i18n configured and middleware/proxy-based authorization can allow unauthorized access to protected page data through locale-less /_next/data/\u003cbuildId\u003e/\u003cpage\u003e.json requests. In affected configurations, middleware does not run for the unprefixed data route, allowing an attacker to retrieve SSR JSON for protected pages without passing the intended authorization checks. This vulnerability is fixed in 15.5.16 and 16.2.5.","status":"published","published":"2026-05-13T16:48:16.218Z","modified":"2026-08-13T12:04:22.893Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-863","CWE-551"],"updated_at":"2026-11-02T13:43:00.288193Z"}],"euvd":[{"id":"EUVD-2026-30057","description":"Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router with i18n configured and middleware/proxy-based authorization can allow unauthorized access to protected page data through locale-less /_next/data/\u003cbuildId\u003e/\u003cpage\u003e.json requests. In affected configurations, middleware does not run for the unprefixed data route, allowing an attacker to retrieve SSR JSON for protected pages without passing the intended authorization checks. This vulnerability is fixed in 15.5.16 and 16.2.5.","status":"published","published":"2026-05-13T16:48:16Z","modified":"2026-08-13T12:04:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T18:01:57.213133Z"}],"ghsa":[{"id":"GHSA-36qx-fr4f-26g5","title":"Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n","description":"### Impact\n\nApplications using the Pages Router with `i18n` configured and middleware/proxy-based authorization can allow unauthorized access to protected page data through locale-less `/_next/data/\u003cbuildId\u003e/\u003cpage\u003e.json` requests. In affected configurations, middleware does not run for the unprefixed data route, allowing an attacker to retrieve SSR JSON for protected pages without passing the intended authorization checks.\n\n### Fix\nThe matcher logic was updated to perform the same match as it would on a non-i18n data route.\n\n### Workarounds\n\nIf you cannot upgrade immediately, enforce authorization in the page's server-side data path instead of relying solely on middleware.","status":"published","published":"2026-05-11T15:53:51Z","modified":"2026-05-14T20:38:00Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:40:09.033429Z"},{"id":"GHSA-8h8q-6873-q5fj","title":"Next.js Vulnerable to Denial of Service with Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23870](https://github.com/facebook/react/security/advisories/GHSA-rv78-f8rc-xrxh). \n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.","status":"published","published":"2026-05-11T14:50:27Z","modified":"2026-05-11T14:50:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:40:05.816188Z"},{"id":"GHSA-h25m-26qc-wcjf","title":"Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.0.x, 19.1.x, and 19.2.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23864](https://github.com/facebook/react/security/advisories/GHSA-83fc-fqcc-2hmg).\n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage, out-of-memory exceptions, or server crashes. This can result in denial of service in unpatched environments.","status":"published","published":"2026-01-28T15:38:01Z","modified":"2026-01-28T15:38:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400","CWE-502"],"updated_at":"2026-11-02T14:39:20.563096Z"},{"id":"GHSA-q4gf-8mx6-v5v3","title":"Next.js has a Denial of Service with Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23869](https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg). You can read more about this advisory our [this changelog](https://vercel.com/changelog/summary-of-cve-2026-23869).\n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.","status":"published","published":"2026-04-10T15:35:47Z","modified":"2026-04-10T15:35:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:39:52.102227Z"}],"nvd":[{"id":"CVE-2026-44573","description":"Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router with i18n configured and middleware/proxy-based authorization can allow unauthorized access to protected page data through locale-less /_next/data/\u003cbuildId\u003e/\u003cpage\u003e.json requests. In affected configurations, middleware does not run for the unprefixed data route, allowing an attacker to retrieve SSR JSON for protected pages without passing the intended authorization checks. This vulnerability is fixed in 15.5.16 and 16.2.5.","status":"published","published":"2026-05-13T17:16:22.627Z","modified":"2026-10-26T17:10:03.27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-863","CWE-551"],"updated_at":"2026-11-02T14:12:19.020465Z"}],"osv":[{"id":"CVE-2026-44573","title":"Next.js: Middleware / Proxy bypass in Pages Router applications using i18n","description":"Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router with i18n configured and middleware/proxy-based authorization can allow unauthorized access to protected page data through locale-less /_next/data/\u003cbuildId\u003e/\u003cpage\u003e.json requests. In affected configurations, middleware does not run for the unprefixed data route, allowing an attacker to retrieve SSR JSON for protected pages without passing the intended authorization checks. This vulnerability is fixed in 15.5.16 and 16.2.5.","status":"published","published":"2026-05-13T16:48:16.218Z","modified":"2026-10-28T02:31:14.8404328Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:45:05.172514Z"},{"id":"GHSA-36qx-fr4f-26g5","title":"Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n","description":"### Impact\n\nApplications using the Pages Router with `i18n` configured and middleware/proxy-based authorization can allow unauthorized access to protected page data through locale-less `/_next/data/\u003cbuildId\u003e/\u003cpage\u003e.json` requests. In affected configurations, middleware does not run for the unprefixed data route, allowing an attacker to retrieve SSR JSON for protected pages without passing the intended authorization checks.\n\n### Fix\nThe matcher logic was updated to perform the same match as it would on a non-i18n data route.\n\n### Workarounds\n\nIf you cannot upgrade immediately, enforce authorization in the page's server-side data path instead of relying solely on middleware.","status":"published","published":"2026-05-11T15:53:51Z","modified":"2026-09-10T03:51:04.325298044Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:46:35.406455Z"},{"id":"GHSA-8h8q-6873-q5fj","title":"Next.js Vulnerable to Denial of Service with Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23870](https://github.com/facebook/react/security/advisories/GHSA-rv78-f8rc-xrxh). \n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.","status":"published","published":"2026-05-11T14:50:27Z","modified":"2026-09-10T03:51:04.979274056Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:46:42.437513Z"},{"id":"GHSA-h25m-26qc-wcjf","title":"Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.0.x, 19.1.x, and 19.2.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23864](https://github.com/facebook/react/security/advisories/GHSA-83fc-fqcc-2hmg).\n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage, out-of-memory exceptions, or server crashes. This can result in denial of service in unpatched environments.","status":"published","published":"2026-01-28T15:38:01Z","modified":"2026-09-10T03:50:33.105717591Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400","CWE-502"],"updated_at":"2026-11-02T15:46:48.546324Z"},{"id":"GHSA-q4gf-8mx6-v5v3","title":"Next.js has a Denial of Service with Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23869](https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg). You can read more about this advisory our [this changelog](https://vercel.com/changelog/summary-of-cve-2026-23869).\n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.","status":"published","published":"2026-04-10T15:35:47Z","modified":"2026-09-10T03:51:02.717818177Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:46:54.055966Z"},{"id":"CLSA-2026-1791807020","title":"TuxCare security update for 9 packages (28 CVEs)","description":"TuxCare rebuilt 9 packages to address 28 CVEs. Fixed in 15.1.2-tuxcare.2.","status":"withdrawn","published":"2026-10-12T12:10:20Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1792346490","title":"TuxCare security update for @next/swc-linux-x64-gnu (28 CVEs)","description":"TuxCare rebuilt @next/swc-linux-x64-gnu to address 28 CVEs. Fixed in 15.1.2-tuxcare.2.","status":"published","published":"2026-10-18T18:01:28Z","modified":"2026-10-18T19:16:08.317178398Z","updated_at":"2026-11-02T15:43:52.782414Z"},{"id":"CLSA-2026-1792367406","title":"TuxCare security update for @next/swc-linux-arm64-gnu (28 CVEs)","description":"TuxCare rebuilt @next/swc-linux-arm64-gnu to address 28 CVEs. Fixed in 15.1.2-tuxcare.2.","status":"published","published":"2026-10-18T23:50:05Z","modified":"2026-10-19T07:46:33.865755751Z","updated_at":"2026-11-02T15:43:53.353888Z"},{"id":"ROOT-APP-NPM-CVE-2026-44573","title":"CVE-2026-44573 in next - Patched by Root","description":"Root has patched CVE-2026-44573 in the next package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-11-02T10:42:42Z","modified":"2026-11-02T11:15:06.332038511Z","updated_at":"2026-11-02T15:53:27.649662Z"},{"id":"ROOT-APP-NPM-GHSA-8h8q-6873-q5fj","title":"GHSA-8h8q-6873-q5fj in next - Patched by Root","description":"Root has patched GHSA-8h8q-6873-q5fj in the next package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-11-02T10:42:42Z","modified":"2026-11-02T11:15:05.820234548Z","updated_at":"2026-11-02T15:53:27.940619Z"},{"id":"ROOT-APP-NPM-GHSA-h25m-26qc-wcjf","title":"GHSA-h25m-26qc-wcjf in next - Patched by Root","description":"Root has patched GHSA-h25m-26qc-wcjf in the next package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-11-02T10:42:42Z","modified":"2026-11-02T11:15:06.672348464Z","updated_at":"2026-11-02T15:53:27.940619Z"},{"id":"ROOT-APP-NPM-GHSA-q4gf-8mx6-v5v3","title":"GHSA-q4gf-8mx6-v5v3 in next - Patched by Root","description":"Root has patched GHSA-q4gf-8mx6-v5v3 in the next package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-11-02T10:42:42Z","modified":"2026-11-02T11:15:05.55154554Z","updated_at":"2026-11-02T15:53:27.940619Z"}]}}