{"id":"CVE-2026-44580","aliases":["CLSA-2026-1786360051","CLSA-2026-1786995617","CLSA-2026-1791807020","CLSA-2026-1792195727","CLSA-2026-1792195750","CLSA-2026-1792196726","CLSA-2026-1792196728","CLSA-2026-1792206290","CLSA-2026-1792206304","CLSA-2026-1792256964","CLSA-2026-1792272230","CLSA-2026-1792272246","CLSA-2026-1792293000","CLSA-2026-1792293016","CLSA-2026-1792304720","CLSA-2026-1792304741","CLSA-2026-1792326302","CLSA-2026-1792326304","CLSA-2026-1792338232","CLSA-2026-1792338235","CLSA-2026-1792346470","CLSA-2026-1792346490","CLSA-2026-1792358596","CLSA-2026-1792358599","CLSA-2026-1792364002","CLSA-2026-1792364004","CLSA-2026-1792367391","CLSA-2026-1792367406","EUVD-2026-30082","GHSA-4633-3j49-mh5q","GHSA-4c39-4ccg-62r3","GHSA-8h8q-6873-q5fj","GHSA-955p-x3mx-jcvp","GHSA-gx5p-jg67-6x7h","GHSA-h25m-26qc-wcjf","GHSA-q4gf-8mx6-v5v3","ROOT-APP-NPM-CVE-2026-44580","ROOT-APP-NPM-GHSA-8h8q-6873-q5fj","ROOT-APP-NPM-GHSA-h25m-26qc-wcjf","ROOT-APP-NPM-GHSA-q4gf-8mx6-v5v3"],"status":"published","title":"Next.js: Cross-site scripting in beforeInteractive scripts with untrusted input","description":"Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be vulnerable to cross-site scripting. In affected versions, serialized script content was not escaped safely before being embedded into the document, which could allow attacker-controlled input to break out of the intended script context and execute arbitrary JavaScript in a visitor's browser. This vulnerability is fixed in 15.5.16 and 16.2.5.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00223,"percentile":0.13026,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400","CWE-502","CWE-770","CWE-79"],"published":"2026-01-28T15:38:01Z","modified":"2026-11-02T11:15:06Z","fixes":[{"ecosystem":"npm","package":"next","fixed_in":["15.5.16","16.2.5","15.0.8","15.1.12","15.2.9","15.3.9","15.4.11","15.5.10","15.6.0-canary.61","16.0.11","16.1.5","15.5.15","16.2.3"],"sources":["ghsa","osv"]},{"ecosystem":"Root:npm","package":"next","fixed_in":["13.5.11-aikido.7","13.5.11-aikido.4","16.1.6-aikido.5","15.5.15-aikido.2","13.5.11-aikido.8","16.1.7-aikido.2","13.5.11-aikido.5","13.5.11-aikido.6","15.5.15-aikido.3","16.1.6-aikido.6","15.5.15-aikido.4","16.1.6-aikido.7","16.1.7-aikido.3","13.5.11-aikido.9","16.1.6-aikido.8","13.5.11-aikido.2","13.5.11-aikido.3","16.2.5-aikido.1","16.2.5-aikido.3","16.2.5-aikido.2","14.2.5-aikido.5","14.2.5-aikido.8","14.2.35-aikido.9","14.2.30-aikido.7","14.2.26-aikido.6","14.2.26-aikido.4","14.2.30-aikido.10","13.4.19-aikido.6","13.4.19-aikido.7","14.2.10-aikido.3","14.2.13-aikido.3","14.0.4-aikido.6","14.2.3-aikido.1","14.0.4-aikido.9","14.2.24-aikido.2","14.2.25-aikido.2","14.1.0-aikido.4","14.2.18-aikido.2","13.3.0-aikido.5","14.0.4-aikido.5","14.0.4-aikido.7","14.0.4-aikido.2","14.1.0-aikido.7","14.1.0-aikido.8","14.0.4-aikido.3","14.2.13-aikido.1","14.2.3-aikido.5","14.2.0-aikido.2","14.0.3-aikido.3","14.2.5-aikido.9","14.2.5-aikido.10","14.2.2-aikido.7","14.2.10-aikido.1","14.2.29-aikido.5","14.2.31-aikido.2","14.2.18-aikido.1","14.0.0-aikido.7","14.2.10-aikido.4","14.2.13-aikido.4","14.2.10-aikido.2","14.2.18-aikido.6","14.2.21-aikido.6","14.2.16-aikido.6","14.1.4-aikido.5","14.2.25-aikido.1","13.2.4-aikido.3","14.2.0-aikido.6","14.0.4-aikido.4","14.2.31-aikido.5","14.2.0-aikido.5","14.2.2-aikido.9","14.2.30-aikido.8","13.1.6-aikido.1","13.2.4-aikido.4","14.0.3-aikido.6","14.0.0-aikido.5","14.2.5-aikido.2","14.2.5-aikido.3","14.2.3-aikido.3","13.5.4-aikido.5","14.2.5-aikido.4","13.3.0-aikido.6","14.2.30-aikido.3","14.0.3-aikido.4","14.2.13-aikido.2","14.2.5-aikido.6","14.2.21-aikido.4","14.0.0-aikido.3","14.1.4-aikido.7","14.2.21-aikido.2","14.2.16-aikido.2","14.2.16-aikido.4","13.5.4-aikido.2","14.2.30-aikido.4","13.2.4-aikido.5","13.3.0-aikido.7","14.2.26-aikido.3","14.0.3-aikido.5","14.2.30-aikido.9","15.5.10-aikido.4","14.1.4-aikido.8","13.5.4-aikido.6","14.2.16-aikido.5","14.0.0-aikido.6","14.2.21-aikido.5","14.2.5-aikido.7","14.2.3-aikido.4","14.2.2-aikido.8","13.4.19-aikido.4","14.2.15-aikido.5","14.2.30-aikido.5","14.2.3-aikido.2","15.5.10-aikido.5","14.2.28-aikido.5","14.1.4-aikido.9","13.2.4-aikido.2","16.1.6-aikido.4","16.1.7-aikido.1","13.5.6-aikido.5","14.2.15-aikido.6","14.1.3-aikido.8","13.2.4-aikido.7","14.2.32-aikido.8","14.2.29-aikido.4","14.2.33-aikido.5","13.5.6-aikido.6","14.2.26-aikido.5","15.5.10-aikido.6","14.2.26-aikido.2","14.0.4-aikido.8","14.2.28-aikido.3","14.2.31-aikido.3","14.1.4-aikido.6","14.2.18-aikido.3","13.3.0-aikido.4","14.1.0-aikido.5","14.2.16-aikido.3","14.0.0-aikido.4","14.1.0-aikido.3","14.2.18-aikido.4","13.5.4-aikido.3","14.2.31-aikido.1","14.1.4-aikido.3","14.2.0-aikido.3","13.4.19-aikido.5","14.2.31-aikido.4","14.1.4-aikido.4","13.5.4-aikido.4","13.3.0-aikido.8","13.1.6-aikido.2","14.2.21-aikido.3","13.2.4-aikido.6","14.2.0-aikido.4","14.2.30-aikido.6","14.2.28-aikido.4","14.2.33-aikido.6","14.1.0-aikido.6","15.5.10-aikido.3","14.2.18-aikido.5","13.5.6-aikido.7","14.2.35-aikido.10","14.2.35-aikido.11","14.2.33-aikido.2","14.2.32-aikido.4","14.2.15-aikido.4","14.1.3-aikido.2","14.2.15-aikido.3","14.2.32-aikido.1","14.2.33-aikido.1","14.1.3-aikido.5","14.2.29-aikido.1","14.2.32-aikido.5","14.2.33-aikido.3","14.2.2-aikido.5","14.2.2-aikido.6","14.2.30-aikido.1","14.2.30-aikido.2","14.1.3-aikido.6","14.2.35-aikido.5","14.2.33-aikido.4","14.2.35-aikido.3","14.2.32-aikido.6","14.2.35-aikido.6","14.1.3-aikido.7","14.2.32-aikido.2","14.2.32-aikido.7","14.2.28-aikido.1","14.2.35-aikido.2","14.2.28-aikido.2","14.2.35-aikido.7","14.0.0-aikido.2","14.2.29-aikido.2","14.2.21-aikido.1","14.2.16-aikido.1","14.1.3-aikido.3","14.2.32-aikido.3","14.2.29-aikido.3","14.1.3-aikido.4","14.2.35-aikido.8","14.2.35-aikido.4","14.2.35-aikido.1","13.4.19-aikido.2","13.4.19-aikido.3","14.2.24-aikido.7","14.2.24-aikido.4","14.2.2-aikido.4","14.0.0-aikido.1","13.3.0-aikido.1","13.4.19-aikido.1","14.0.3-aikido.1","13.5.6-aikido.1","13.5.4-aikido.1","13.3.0-aikido.2","13.5.6-aikido.2","14.2.24-aikido.5","13.5.6-aikido.3","13.5.6-aikido.4","14.2.24-aikido.1","14.1.3-aikido.1","13.3.0-aikido.3","14.2.24-aikido.6","14.2.24-aikido.3","14.0.3-aikido.2"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/next","fixed_in":["13.5.11-root.io.7","13.5.11-root.io.4","16.1.6-root.io.5","15.5.15-root.io.2","13.5.11-root.io.8","16.1.7-root.io.2","13.5.11-root.io.5","13.5.11-root.io.6","15.5.15-root.io.3","16.1.6-root.io.6","15.5.15-root.io.4","16.1.6-root.io.7","16.1.7-root.io.3","13.5.11-root.io.9","16.1.6-root.io.8","13.5.11-root.io.2","13.5.11-root.io.3","16.2.5-root.io.1","16.2.5-root.io.3","16.2.5-root.io.2","14.2.5-root.io.5","14.2.5-root.io.8","14.2.35-root.io.9","14.2.30-root.io.7","14.2.26-root.io.6","14.2.26-root.io.4","14.2.30-root.io.10","13.4.19-root.io.6","13.4.19-root.io.7","14.2.10-root.io.3","14.2.13-root.io.3","14.0.4-root.io.6","14.2.3-root.io.1","14.0.4-root.io.9","14.2.25-root.io.2","14.2.24-root.io.2","14.1.0-root.io.4","14.2.18-root.io.2","13.3.0-root.io.5","14.0.4-root.io.5","14.0.4-root.io.7","14.0.4-root.io.2","14.1.0-root.io.7","14.1.0-root.io.8","14.0.4-root.io.3","14.2.13-root.io.1","14.2.3-root.io.5","14.2.0-root.io.2","14.0.3-root.io.3","14.2.5-root.io.9","14.2.5-root.io.10","14.2.2-root.io.7","14.2.10-root.io.1","14.2.29-root.io.5","14.2.31-root.io.2","14.2.18-root.io.1","14.0.0-root.io.7","14.2.10-root.io.4","14.2.13-root.io.4","14.2.10-root.io.2","14.2.18-root.io.6","14.2.21-root.io.6","14.2.16-root.io.6","14.1.4-root.io.5","14.2.25-root.io.1","13.2.4-root.io.3","14.2.0-root.io.6","14.0.4-root.io.4","14.2.31-root.io.5","14.2.0-root.io.5","14.2.2-root.io.9","14.2.30-root.io.8","13.1.6-root.io.1","13.2.4-root.io.4","14.0.3-root.io.6","14.0.0-root.io.5","14.2.5-root.io.2","14.2.5-root.io.3","15.5.15-root.io.1","16.1.6-root.io.3","14.2.3-root.io.3","13.5.4-root.io.5","14.2.5-root.io.4","13.3.0-root.io.6","14.2.30-root.io.3","14.0.3-root.io.4","14.2.13-root.io.2","14.2.5-root.io.6","14.2.21-root.io.4","14.0.0-root.io.3","14.1.4-root.io.7","14.2.21-root.io.2","14.2.16-root.io.2","14.2.16-root.io.4","13.5.4-root.io.2","14.2.30-root.io.4","13.2.4-root.io.5","13.3.0-root.io.7","14.2.26-root.io.3","14.0.3-root.io.5","14.2.30-root.io.9","15.5.10-root.io.4","14.1.4-root.io.8","13.5.4-root.io.6","14.2.16-root.io.5","14.0.0-root.io.6","14.2.21-root.io.5","14.2.5-root.io.7","14.2.3-root.io.4","14.2.2-root.io.8","13.4.19-root.io.4","14.2.15-root.io.5","14.2.30-root.io.5","14.2.3-root.io.2","15.5.10-root.io.5","14.2.28-root.io.5","14.1.4-root.io.9","13.2.4-root.io.2","16.1.6-root.io.4","16.1.7-root.io.1","13.5.6-root.io.5","14.2.15-root.io.6","13.2.4-root.io.7","14.1.3-root.io.8","14.2.32-root.io.8","14.2.29-root.io.4","14.2.33-root.io.5","13.5.6-root.io.6","14.2.26-root.io.5","15.5.10-root.io.6","14.2.26-root.io.2","14.0.4-root.io.8","14.2.28-root.io.3","14.2.31-root.io.3","14.1.4-root.io.6","14.2.18-root.io.3","13.3.0-root.io.4","14.1.0-root.io.5","14.2.16-root.io.3","14.0.0-root.io.4","14.1.0-root.io.3","14.2.18-root.io.4","13.5.4-root.io.3","14.2.31-root.io.1","14.1.4-root.io.3","14.2.0-root.io.3","13.4.19-root.io.5","14.2.31-root.io.4","14.1.4-root.io.4","13.5.4-root.io.4","13.3.0-root.io.8","13.1.6-root.io.2","14.2.21-root.io.3","13.2.4-root.io.6","14.2.0-root.io.4","14.2.30-root.io.6","14.2.33-root.io.6","14.2.28-root.io.4","14.1.0-root.io.6","15.5.10-root.io.3","13.5.6-root.io.7","14.2.18-root.io.5","14.2.35-root.io.10","14.2.35-root.io.11","14.2.33-root.io.2","14.2.32-root.io.4","14.2.15-root.io.4","14.1.3-root.io.2","14.2.15-root.io.3","14.2.32-root.io.1","14.2.33-root.io.1","14.1.3-root.io.5","14.2.29-root.io.1","14.2.32-root.io.5","14.2.33-root.io.3","14.2.2-root.io.5","14.2.2-root.io.6","14.2.30-root.io.1","14.2.30-root.io.2","14.1.3-root.io.6","14.2.35-root.io.5","14.2.33-root.io.4","14.2.35-root.io.3","14.2.32-root.io.6","14.2.35-root.io.6","14.1.3-root.io.7","14.2.32-root.io.2","14.2.32-root.io.7","14.2.28-root.io.1","14.2.35-root.io.2","14.2.28-root.io.2","14.2.35-root.io.7","14.0.0-root.io.2","14.2.29-root.io.2","14.2.21-root.io.1","14.1.3-root.io.3","14.2.16-root.io.1","14.2.32-root.io.3","14.2.29-root.io.3","14.1.3-root.io.4","14.2.35-root.io.8","14.2.35-root.io.4","14.2.35-root.io.1","13.4.19-root.io.2","13.4.19-root.io.3","14.2.24-root.io.7","14.2.24-root.io.4","16.1.6-root.io.1","16.1.6-root.io.2","14.2.2-root.io.4","14.0.0-root.io.1","13.3.0-root.io.1","13.4.19-root.io.1","14.0.3-root.io.1","13.5.6-root.io.1","13.5.4-root.io.1","13.3.0-root.io.2","13.5.6-root.io.2","14.2.24-root.io.5","13.5.6-root.io.3","13.5.6-root.io.4","14.2.24-root.io.1","14.1.3-root.io.1","13.3.0-root.io.3","14.2.24-root.io.6","14.2.24-root.io.3","14.0.3-root.io.2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.0.0"},{"fixed":"15.5.16"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.0"},{"fixed":"16.2.5"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.0.0"},{"fixed":"15.5.16"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.0"},{"fixed":"16.2.5"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.0.0"},{"fixed":"15.0.8"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.1.1-canary.0"},{"fixed":"15.1.12"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.0-canary.0"},{"fixed":"15.2.9"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.3.0-canary.0"},{"fixed":"15.3.9"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.4.0-canary.0"},{"fixed":"15.4.11"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.5.1-canary.0"},{"fixed":"15.5.10"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.6.0-canary.0"},{"fixed":"15.6.0-canary.61"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.0-beta.0"},{"fixed":"16.0.11"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.1.0-canary.0"},{"fixed":"16.1.5"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.0.0"},{"fixed":"15.5.15"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.0-beta.0"},{"fixed":"16.2.3"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"create-next-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"create-next-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.6-tuxcare.0"},{"fixed":"16.0.6-tuxcare.7"}]}],"versions":["16.0.6","16.0.6-tuxcare.3","16.0.6-tuxcare.4","16.0.6-tuxcare.5","16.0.6-tuxcare.6"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/eslint-plugin-next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/eslint-plugin-next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.6-tuxcare.0"},{"fixed":"16.0.6-tuxcare.7"}]}],"versions":["16.0.6","16.0.6-tuxcare.3","16.0.6-tuxcare.4","16.0.6-tuxcare.5","16.0.6-tuxcare.6"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/bundle-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/bundle-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.6-tuxcare.0"},{"fixed":"16.0.6-tuxcare.7"}]}],"versions":["16.0.6","16.0.6-tuxcare.3","16.0.6-tuxcare.4","16.0.6-tuxcare.5","16.0.6-tuxcare.6"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"next-rspack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.6-tuxcare.0"},{"fixed":"16.0.6-tuxcare.7"}]}],"versions":["16.0.6","16.0.6-tuxcare.3","16.0.6-tuxcare.4","16.0.6-tuxcare.5","16.0.6-tuxcare.6"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/plugin-storybook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/plugin-storybook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.6-tuxcare.0"},{"fixed":"16.0.6-tuxcare.7"}]}],"versions":["16.0.6","16.0.6-tuxcare.3","16.0.6-tuxcare.4","16.0.6-tuxcare.5","16.0.6-tuxcare.6"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/polyfill-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/polyfill-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.6-tuxcare.0"},{"fixed":"16.0.6-tuxcare.7"}]}],"versions":["16.0.6","16.0.6-tuxcare.3","16.0.6-tuxcare.4","16.0.6-tuxcare.5","16.0.6-tuxcare.6"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/polyfill-nomodule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/polyfill-nomodule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.6-tuxcare.0"},{"fixed":"16.0.6-tuxcare.7"}]}],"versions":["16.0.6","16.0.6-tuxcare.3","16.0.6-tuxcare.4","16.0.6-tuxcare.5","16.0.6-tuxcare.6"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/react-refresh-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/react-refresh-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.6-tuxcare.0"},{"fixed":"16.0.6-tuxcare.7"}]}],"versions":["16.0.6","16.0.6-tuxcare.3","16.0.6-tuxcare.4","16.0.6-tuxcare.5","16.0.6-tuxcare.6"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/third-parties","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/third-parties","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.6-tuxcare.0"},{"fixed":"16.0.6-tuxcare.7"}]}],"versions":["16.0.6","16.0.6-tuxcare.3","16.0.6-tuxcare.4","16.0.6-tuxcare.5","16.0.6-tuxcare.6"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/swc-linux-x64-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.6-tuxcare.0"},{"fixed":"16.0.6-tuxcare.7"}]}],"versions":["16.0.6","16.0.6-tuxcare.3","16.0.6-tuxcare.4","16.0.6-tuxcare.5","16.0.6-tuxcare.6"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/swc-linux-x64-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.1.2-tuxcare.0"},{"fixed":"15.1.2-tuxcare.2"}]}],"versions":["15.1.2","15.1.2-tuxcare.1"],"bundled":22},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/codemod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/codemod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.6-tuxcare.0"},{"fixed":"16.0.6-tuxcare.7"}]}],"versions":["16.0.6","16.0.6-tuxcare.3","16.0.6-tuxcare.4","16.0.6-tuxcare.5","16.0.6-tuxcare.6"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/mdx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/mdx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.6-tuxcare.0"},{"fixed":"16.0.6-tuxcare.7"}]}],"versions":["16.0.6","16.0.6-tuxcare.3","16.0.6-tuxcare.4","16.0.6-tuxcare.5","16.0.6-tuxcare.6"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/swc-linux-arm64-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.6-tuxcare.0"},{"fixed":"16.0.6-tuxcare.7"}]}],"versions":["16.0.6","16.0.6-tuxcare.3","16.0.6-tuxcare.4","16.0.6-tuxcare.5","16.0.6-tuxcare.6"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/swc-linux-arm64-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.1.2-tuxcare.0"},{"fixed":"15.1.2-tuxcare.2"}]}],"versions":["15.1.2","15.1.2-tuxcare.1"],"bundled":22},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"13.0.0"},{"fixed":"15.5.16"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.0.0"},{"fixed":"16.2.5"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"13.0.0"},{"fixed":"15.5.16"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.0.0"},{"fixed":"16.2.5"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"13.0.0"},{"fixed":"15.0.8"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.1.1-canary.0"},{"fixed":"15.1.12"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.2.0-canary.0"},{"fixed":"15.2.9"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.3.0-canary.0"},{"fixed":"15.3.9"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.4.0-canary.0"},{"fixed":"15.4.11"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.5.1-canary.0"},{"fixed":"15.5.10"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.6.0-canary.0"},{"fixed":"15.6.0-canary.61"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.0.0-beta.0"},{"fixed":"16.0.11"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.1.0-canary.0"},{"fixed":"16.1.5"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"13.0.0"},{"fixed":"15.5.15"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.0.0-beta.0"},{"fixed":"16.2.3"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5.11-aikido.7"},{"fixed":"13.5.11-aikido.4"},{"fixed":"16.1.6-aikido.5"},{"fixed":"15.5.15-aikido.2"},{"fixed":"13.5.11-aikido.8"},{"fixed":"16.1.7-aikido.2"},{"fixed":"13.5.11-aikido.5"},{"fixed":"13.5.11-aikido.6"},{"fixed":"15.5.15-aikido.3"},{"fixed":"16.1.6-aikido.6"},{"fixed":"15.5.15-aikido.4"},{"fixed":"16.1.6-aikido.7"},{"fixed":"16.1.7-aikido.3"},{"fixed":"13.5.11-aikido.9"},{"fixed":"16.1.6-aikido.8"},{"fixed":"13.5.11-aikido.2"},{"fixed":"13.5.11-aikido.3"},{"fixed":"16.2.5-aikido.1"},{"fixed":"16.2.5-aikido.3"},{"fixed":"16.2.5-aikido.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5.11-root.io.7"},{"fixed":"13.5.11-root.io.4"},{"fixed":"16.1.6-root.io.5"},{"fixed":"15.5.15-root.io.2"},{"fixed":"13.5.11-root.io.8"},{"fixed":"16.1.7-root.io.2"},{"fixed":"13.5.11-root.io.5"},{"fixed":"13.5.11-root.io.6"},{"fixed":"15.5.15-root.io.3"},{"fixed":"16.1.6-root.io.6"},{"fixed":"15.5.15-root.io.4"},{"fixed":"16.1.6-root.io.7"},{"fixed":"16.1.7-root.io.3"},{"fixed":"13.5.11-root.io.9"},{"fixed":"16.1.6-root.io.8"},{"fixed":"13.5.11-root.io.2"},{"fixed":"13.5.11-root.io.3"},{"fixed":"16.2.5-root.io.1"},{"fixed":"16.2.5-root.io.3"},{"fixed":"16.2.5-root.io.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-aikido.5"},{"fixed":"14.2.5-aikido.8"},{"fixed":"14.2.35-aikido.9"},{"fixed":"14.2.30-aikido.7"},{"fixed":"14.2.26-aikido.6"},{"fixed":"14.2.26-aikido.4"},{"fixed":"14.2.30-aikido.10"},{"fixed":"13.4.19-aikido.6"},{"fixed":"13.4.19-aikido.7"},{"fixed":"14.2.10-aikido.3"},{"fixed":"14.2.13-aikido.3"},{"fixed":"14.0.4-aikido.6"},{"fixed":"14.2.3-aikido.1"},{"fixed":"14.0.4-aikido.9"},{"fixed":"14.2.24-aikido.2"},{"fixed":"14.2.25-aikido.2"},{"fixed":"14.1.0-aikido.4"},{"fixed":"14.2.18-aikido.2"},{"fixed":"13.3.0-aikido.5"},{"fixed":"14.0.4-aikido.5"},{"fixed":"14.0.4-aikido.7"},{"fixed":"14.0.4-aikido.2"},{"fixed":"14.1.0-aikido.7"},{"fixed":"14.1.0-aikido.8"},{"fixed":"14.0.4-aikido.3"},{"fixed":"14.2.13-aikido.1"},{"fixed":"14.2.3-aikido.5"},{"fixed":"14.2.0-aikido.2"},{"fixed":"14.0.3-aikido.3"},{"fixed":"14.2.5-aikido.9"},{"fixed":"14.2.5-aikido.10"},{"fixed":"14.2.2-aikido.7"},{"fixed":"14.2.10-aikido.1"},{"fixed":"14.2.29-aikido.5"},{"fixed":"14.2.31-aikido.2"},{"fixed":"14.2.18-aikido.1"},{"fixed":"14.0.0-aikido.7"},{"fixed":"14.2.10-aikido.4"},{"fixed":"14.2.13-aikido.4"},{"fixed":"14.2.10-aikido.2"},{"fixed":"14.2.18-aikido.6"},{"fixed":"14.2.21-aikido.6"},{"fixed":"14.2.16-aikido.6"},{"fixed":"14.1.4-aikido.5"},{"fixed":"14.2.25-aikido.1"},{"fixed":"13.2.4-aikido.3"},{"fixed":"14.2.0-aikido.6"},{"fixed":"14.0.4-aikido.4"},{"fixed":"14.2.31-aikido.5"},{"fixed":"14.2.0-aikido.5"},{"fixed":"14.2.2-aikido.9"},{"fixed":"14.2.30-aikido.8"},{"fixed":"13.1.6-aikido.1"},{"fixed":"13.2.4-aikido.4"},{"fixed":"14.0.3-aikido.6"},{"fixed":"14.0.0-aikido.5"},{"fixed":"14.2.5-aikido.2"},{"fixed":"14.2.5-aikido.3"},{"fixed":"14.2.3-aikido.3"},{"fixed":"13.5.11-aikido.7"},{"fixed":"13.5.4-aikido.5"},{"fixed":"14.2.5-aikido.4"},{"fixed":"13.3.0-aikido.6"},{"fixed":"14.2.30-aikido.3"},{"fixed":"14.0.3-aikido.4"},{"fixed":"14.2.13-aikido.2"},{"fixed":"14.2.5-aikido.6"},{"fixed":"14.2.21-aikido.4"},{"fixed":"14.0.0-aikido.3"},{"fixed":"14.1.4-aikido.7"},{"fixed":"14.2.21-aikido.2"},{"fixed":"14.2.16-aikido.2"},{"fixed":"14.2.16-aikido.4"},{"fixed":"13.5.4-aikido.2"},{"fixed":"14.2.30-aikido.4"},{"fixed":"13.2.4-aikido.5"},{"fixed":"13.3.0-aikido.7"},{"fixed":"14.2.26-aikido.3"},{"fixed":"14.0.3-aikido.5"},{"fixed":"14.2.30-aikido.9"},{"fixed":"15.5.10-aikido.4"},{"fixed":"14.1.4-aikido.8"},{"fixed":"13.5.4-aikido.6"},{"fixed":"14.2.16-aikido.5"},{"fixed":"14.0.0-aikido.6"},{"fixed":"14.2.21-aikido.5"},{"fixed":"14.2.5-aikido.7"},{"fixed":"14.2.3-aikido.4"},{"fixed":"14.2.2-aikido.8"},{"fixed":"13.4.19-aikido.4"},{"fixed":"14.2.15-aikido.5"},{"fixed":"14.2.30-aikido.5"},{"fixed":"14.2.3-aikido.2"},{"fixed":"15.5.10-aikido.5"},{"fixed":"14.2.28-aikido.5"},{"fixed":"14.1.4-aikido.9"},{"fixed":"13.2.4-aikido.2"},{"fixed":"16.1.6-aikido.4"},{"fixed":"16.1.7-aikido.1"},{"fixed":"13.5.6-aikido.5"},{"fixed":"14.2.15-aikido.6"},{"fixed":"16.1.6-aikido.5"},{"fixed":"15.5.15-aikido.2"},{"fixed":"14.1.3-aikido.8"},{"fixed":"13.2.4-aikido.7"},{"fixed":"14.2.32-aikido.8"},{"fixed":"14.2.29-aikido.4"},{"fixed":"14.2.33-aikido.5"},{"fixed":"13.5.6-aikido.6"},{"fixed":"13.5.11-aikido.8"},{"fixed":"14.2.26-aikido.5"},{"fixed":"15.5.10-aikido.6"},{"fixed":"14.2.26-aikido.2"},{"fixed":"14.0.4-aikido.8"},{"fixed":"14.2.28-aikido.3"},{"fixed":"14.2.31-aikido.3"},{"fixed":"14.1.4-aikido.6"},{"fixed":"14.2.18-aikido.3"},{"fixed":"13.3.0-aikido.4"},{"fixed":"14.1.0-aikido.5"},{"fixed":"16.1.7-aikido.2"},{"fixed":"14.2.16-aikido.3"},{"fixed":"14.0.0-aikido.4"},{"fixed":"14.1.0-aikido.3"},{"fixed":"13.5.11-aikido.6"},{"fixed":"14.2.18-aikido.4"},{"fixed":"13.5.4-aikido.3"},{"fixed":"14.2.31-aikido.1"},{"fixed":"14.1.4-aikido.3"},{"fixed":"14.2.0-aikido.3"},{"fixed":"13.4.19-aikido.5"},{"fixed":"15.5.15-aikido.3"},{"fixed":"16.1.6-aikido.6"},{"fixed":"14.2.31-aikido.4"},{"fixed":"14.1.4-aikido.4"},{"fixed":"13.5.4-aikido.4"},{"fixed":"15.5.15-aikido.4"},{"fixed":"16.1.6-aikido.7"},{"fixed":"16.1.7-aikido.3"},{"fixed":"13.3.0-aikido.8"},{"fixed":"13.1.6-aikido.2"},{"fixed":"14.2.21-aikido.3"},{"fixed":"13.2.4-aikido.6"},{"fixed":"13.5.11-aikido.9"},{"fixed":"14.2.0-aikido.4"},{"fixed":"14.2.30-aikido.6"},{"fixed":"14.2.28-aikido.4"},{"fixed":"14.2.33-aikido.6"},{"fixed":"14.1.0-aikido.6"},{"fixed":"15.5.10-aikido.3"},{"fixed":"16.1.6-aikido.8"},{"fixed":"14.2.18-aikido.5"},{"fixed":"13.5.6-aikido.7"},{"fixed":"14.2.35-aikido.10"},{"fixed":"14.2.35-aikido.11"},{"fixed":"16.2.5-aikido.1"},{"fixed":"16.2.5-aikido.3"},{"fixed":"16.2.5-aikido.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-root.io.5"},{"fixed":"14.2.5-root.io.8"},{"fixed":"14.2.35-root.io.9"},{"fixed":"14.2.30-root.io.7"},{"fixed":"14.2.26-root.io.6"},{"fixed":"14.2.26-root.io.4"},{"fixed":"14.2.30-root.io.10"},{"fixed":"13.4.19-root.io.6"},{"fixed":"13.4.19-root.io.7"},{"fixed":"14.2.10-root.io.3"},{"fixed":"14.2.13-root.io.3"},{"fixed":"14.0.4-root.io.6"},{"fixed":"14.2.3-root.io.1"},{"fixed":"14.0.4-root.io.9"},{"fixed":"14.2.25-root.io.2"},{"fixed":"14.2.24-root.io.2"},{"fixed":"14.1.0-root.io.4"},{"fixed":"14.2.18-root.io.2"},{"fixed":"13.3.0-root.io.5"},{"fixed":"14.0.4-root.io.5"},{"fixed":"14.0.4-root.io.7"},{"fixed":"14.0.4-root.io.2"},{"fixed":"14.1.0-root.io.7"},{"fixed":"14.1.0-root.io.8"},{"fixed":"14.0.4-root.io.3"},{"fixed":"14.2.13-root.io.1"},{"fixed":"14.2.3-root.io.5"},{"fixed":"14.2.0-root.io.2"},{"fixed":"14.0.3-root.io.3"},{"fixed":"14.2.5-root.io.9"},{"fixed":"14.2.5-root.io.10"},{"fixed":"14.2.2-root.io.7"},{"fixed":"14.2.10-root.io.1"},{"fixed":"14.2.29-root.io.5"},{"fixed":"14.2.31-root.io.2"},{"fixed":"14.2.18-root.io.1"},{"fixed":"14.0.0-root.io.7"},{"fixed":"14.2.10-root.io.4"},{"fixed":"14.2.13-root.io.4"},{"fixed":"14.2.10-root.io.2"},{"fixed":"14.2.18-root.io.6"},{"fixed":"14.2.21-root.io.6"},{"fixed":"14.2.16-root.io.6"},{"fixed":"14.1.4-root.io.5"},{"fixed":"14.2.25-root.io.1"},{"fixed":"13.2.4-root.io.3"},{"fixed":"14.2.0-root.io.6"},{"fixed":"14.0.4-root.io.4"},{"fixed":"14.2.31-root.io.5"},{"fixed":"14.2.0-root.io.5"},{"fixed":"14.2.2-root.io.9"},{"fixed":"14.2.30-root.io.8"},{"fixed":"13.1.6-root.io.1"},{"fixed":"13.2.4-root.io.4"},{"fixed":"14.0.3-root.io.6"},{"fixed":"14.0.0-root.io.5"},{"fixed":"14.2.5-root.io.2"},{"fixed":"14.2.5-root.io.3"},{"fixed":"15.5.15-root.io.1"},{"fixed":"16.1.6-root.io.3"},{"fixed":"14.2.3-root.io.3"},{"fixed":"13.5.4-root.io.5"},{"fixed":"13.5.11-root.io.7"},{"fixed":"14.2.5-root.io.4"},{"fixed":"13.3.0-root.io.6"},{"fixed":"14.2.30-root.io.3"},{"fixed":"14.0.3-root.io.4"},{"fixed":"14.2.13-root.io.2"},{"fixed":"14.2.5-root.io.6"},{"fixed":"14.2.21-root.io.4"},{"fixed":"14.0.0-root.io.3"},{"fixed":"14.1.4-root.io.7"},{"fixed":"14.2.21-root.io.2"},{"fixed":"14.2.16-root.io.2"},{"fixed":"14.2.16-root.io.4"},{"fixed":"13.5.4-root.io.2"},{"fixed":"14.2.30-root.io.4"},{"fixed":"13.2.4-root.io.5"},{"fixed":"13.3.0-root.io.7"},{"fixed":"14.2.26-root.io.3"},{"fixed":"14.0.3-root.io.5"},{"fixed":"14.2.30-root.io.9"},{"fixed":"15.5.10-root.io.4"},{"fixed":"14.1.4-root.io.8"},{"fixed":"13.5.4-root.io.6"},{"fixed":"14.2.16-root.io.5"},{"fixed":"14.0.0-root.io.6"},{"fixed":"14.2.21-root.io.5"},{"fixed":"14.2.5-root.io.7"},{"fixed":"14.2.3-root.io.4"},{"fixed":"14.2.2-root.io.8"},{"fixed":"13.4.19-root.io.4"},{"fixed":"14.2.15-root.io.5"},{"fixed":"14.2.30-root.io.5"},{"fixed":"14.2.3-root.io.2"},{"fixed":"15.5.10-root.io.5"},{"fixed":"14.2.28-root.io.5"},{"fixed":"14.1.4-root.io.9"},{"fixed":"13.2.4-root.io.2"},{"fixed":"16.1.6-root.io.4"},{"fixed":"16.1.7-root.io.1"},{"fixed":"13.5.6-root.io.5"},{"fixed":"14.2.15-root.io.6"},{"fixed":"16.1.6-root.io.5"},{"fixed":"13.2.4-root.io.7"},{"fixed":"15.5.15-root.io.2"},{"fixed":"14.1.3-root.io.8"},{"fixed":"14.2.32-root.io.8"},{"fixed":"14.2.29-root.io.4"},{"fixed":"14.2.33-root.io.5"},{"fixed":"13.5.6-root.io.6"},{"fixed":"13.5.11-root.io.8"},{"fixed":"14.2.26-root.io.5"},{"fixed":"15.5.10-root.io.6"},{"fixed":"14.2.26-root.io.2"},{"fixed":"14.0.4-root.io.8"},{"fixed":"14.2.28-root.io.3"},{"fixed":"14.2.31-root.io.3"},{"fixed":"14.1.4-root.io.6"},{"fixed":"14.2.18-root.io.3"},{"fixed":"13.3.0-root.io.4"},{"fixed":"14.1.0-root.io.5"},{"fixed":"16.1.7-root.io.2"},{"fixed":"14.2.16-root.io.3"},{"fixed":"14.0.0-root.io.4"},{"fixed":"14.1.0-root.io.3"},{"fixed":"13.5.11-root.io.6"},{"fixed":"14.2.18-root.io.4"},{"fixed":"13.5.4-root.io.3"},{"fixed":"14.2.31-root.io.1"},{"fixed":"14.1.4-root.io.3"},{"fixed":"14.2.0-root.io.3"},{"fixed":"13.4.19-root.io.5"},{"fixed":"14.2.31-root.io.4"},{"fixed":"15.5.15-root.io.3"},{"fixed":"16.1.6-root.io.6"},{"fixed":"14.1.4-root.io.4"},{"fixed":"13.5.4-root.io.4"},{"fixed":"15.5.15-root.io.4"},{"fixed":"16.1.6-root.io.7"},{"fixed":"16.1.7-root.io.3"},{"fixed":"13.3.0-root.io.8"},{"fixed":"13.1.6-root.io.2"},{"fixed":"14.2.21-root.io.3"},{"fixed":"13.2.4-root.io.6"},{"fixed":"13.5.11-root.io.9"},{"fixed":"14.2.0-root.io.4"},{"fixed":"14.2.30-root.io.6"},{"fixed":"14.2.33-root.io.6"},{"fixed":"14.2.28-root.io.4"},{"fixed":"14.1.0-root.io.6"},{"fixed":"15.5.10-root.io.3"},{"fixed":"13.5.6-root.io.7"},{"fixed":"16.1.6-root.io.8"},{"fixed":"14.2.18-root.io.5"},{"fixed":"14.2.35-root.io.10"},{"fixed":"14.2.35-root.io.11"},{"fixed":"16.2.5-root.io.1"},{"fixed":"16.2.5-root.io.3"},{"fixed":"16.2.5-root.io.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-aikido.5"},{"fixed":"14.2.5-aikido.8"},{"fixed":"14.2.33-aikido.2"},{"fixed":"14.2.32-aikido.4"},{"fixed":"14.2.35-aikido.9"},{"fixed":"14.2.30-aikido.7"},{"fixed":"14.2.26-aikido.6"},{"fixed":"14.2.26-aikido.4"},{"fixed":"14.2.30-aikido.10"},{"fixed":"13.4.19-aikido.6"},{"fixed":"13.4.19-aikido.7"},{"fixed":"14.2.10-aikido.3"},{"fixed":"14.2.13-aikido.3"},{"fixed":"14.0.4-aikido.6"},{"fixed":"14.2.15-aikido.4"},{"fixed":"14.0.4-aikido.9"},{"fixed":"14.1.3-aikido.2"},{"fixed":"14.2.24-aikido.2"},{"fixed":"14.2.25-aikido.2"},{"fixed":"14.2.18-aikido.2"},{"fixed":"13.3.0-aikido.5"},{"fixed":"14.2.15-aikido.3"},{"fixed":"14.0.4-aikido.5"},{"fixed":"14.0.4-aikido.7"},{"fixed":"14.0.4-aikido.2"},{"fixed":"14.1.0-aikido.7"},{"fixed":"14.1.0-aikido.8"},{"fixed":"14.0.4-aikido.3"},{"fixed":"14.2.13-aikido.1"},{"fixed":"14.2.32-aikido.1"},{"fixed":"14.2.3-aikido.5"},{"fixed":"14.2.0-aikido.2"},{"fixed":"14.0.3-aikido.3"},{"fixed":"14.2.5-aikido.9"},{"fixed":"14.2.5-aikido.10"},{"fixed":"14.2.2-aikido.7"},{"fixed":"14.2.33-aikido.1"},{"fixed":"14.1.3-aikido.5"},{"fixed":"14.2.29-aikido.1"},{"fixed":"14.2.29-aikido.5"},{"fixed":"14.2.31-aikido.2"},{"fixed":"14.0.0-aikido.7"},{"fixed":"14.2.10-aikido.4"},{"fixed":"14.2.13-aikido.4"},{"fixed":"14.2.18-aikido.6"},{"fixed":"14.2.21-aikido.6"},{"fixed":"14.2.16-aikido.6"},{"fixed":"14.1.4-aikido.5"},{"fixed":"14.2.25-aikido.1"},{"fixed":"13.2.4-aikido.3"},{"fixed":"14.2.0-aikido.6"},{"fixed":"14.0.4-aikido.4"},{"fixed":"14.2.31-aikido.5"},{"fixed":"14.2.0-aikido.5"},{"fixed":"14.2.2-aikido.9"},{"fixed":"14.2.30-aikido.8"},{"fixed":"13.1.6-aikido.1"},{"fixed":"13.2.4-aikido.4"},{"fixed":"14.0.3-aikido.6"},{"fixed":"14.2.32-aikido.5"},{"fixed":"14.2.33-aikido.3"},{"fixed":"14.0.0-aikido.5"},{"fixed":"14.2.5-aikido.3"},{"fixed":"14.2.3-aikido.3"},{"fixed":"14.2.2-aikido.5"},{"fixed":"13.5.11-aikido.7"},{"fixed":"14.2.2-aikido.6"},{"fixed":"14.2.30-aikido.1"},{"fixed":"13.5.4-aikido.5"},{"fixed":"14.2.30-aikido.2"},{"fixed":"14.1.3-aikido.6"},{"fixed":"14.2.5-aikido.4"},{"fixed":"13.3.0-aikido.6"},{"fixed":"14.2.30-aikido.3"},{"fixed":"14.0.3-aikido.4"},{"fixed":"14.2.13-aikido.2"},{"fixed":"14.2.5-aikido.6"},{"fixed":"14.2.21-aikido.4"},{"fixed":"14.0.0-aikido.3"},{"fixed":"14.1.4-aikido.7"},{"fixed":"14.2.21-aikido.2"},{"fixed":"14.2.16-aikido.2"},{"fixed":"14.2.16-aikido.4"},{"fixed":"13.5.4-aikido.2"},{"fixed":"14.2.35-aikido.5"},{"fixed":"14.2.30-aikido.4"},{"fixed":"13.2.4-aikido.5"},{"fixed":"13.3.0-aikido.7"},{"fixed":"14.2.33-aikido.4"},{"fixed":"14.2.26-aikido.3"},{"fixed":"14.0.3-aikido.5"},{"fixed":"14.2.30-aikido.9"},{"fixed":"14.1.4-aikido.8"},{"fixed":"14.2.35-aikido.3"},{"fixed":"14.2.32-aikido.6"},{"fixed":"14.2.35-aikido.6"},{"fixed":"13.5.4-aikido.6"},{"fixed":"14.1.3-aikido.7"},{"fixed":"14.2.16-aikido.5"},{"fixed":"14.0.0-aikido.6"},{"fixed":"14.2.21-aikido.5"},{"fixed":"14.2.5-aikido.7"},{"fixed":"14.2.3-aikido.4"},{"fixed":"14.2.2-aikido.8"},{"fixed":"13.4.19-aikido.4"},{"fixed":"14.2.15-aikido.5"},{"fixed":"14.2.30-aikido.5"},{"fixed":"14.2.3-aikido.2"},{"fixed":"14.2.28-aikido.5"},{"fixed":"14.2.32-aikido.2"},{"fixed":"14.1.4-aikido.9"},{"fixed":"14.2.32-aikido.7"},{"fixed":"13.5.6-aikido.5"},{"fixed":"14.2.15-aikido.6"},{"fixed":"14.1.3-aikido.8"},{"fixed":"13.2.4-aikido.7"},{"fixed":"14.2.32-aikido.8"},{"fixed":"14.2.29-aikido.4"},{"fixed":"14.2.28-aikido.1"},{"fixed":"14.2.35-aikido.2"},{"fixed":"14.2.33-aikido.5"},{"fixed":"13.5.6-aikido.6"},{"fixed":"13.5.11-aikido.8"},{"fixed":"14.2.26-aikido.5"},{"fixed":"14.2.28-aikido.2"},{"fixed":"14.2.26-aikido.2"},{"fixed":"14.0.4-aikido.8"},{"fixed":"14.2.28-aikido.3"},{"fixed":"14.2.31-aikido.3"},{"fixed":"14.1.4-aikido.6"},{"fixed":"14.2.35-aikido.7"},{"fixed":"14.2.18-aikido.3"},{"fixed":"14.1.0-aikido.5"},{"fixed":"14.2.16-aikido.3"},{"fixed":"14.0.0-aikido.4"},{"fixed":"14.2.18-aikido.4"},{"fixed":"13.5.4-aikido.3"},{"fixed":"14.2.0-aikido.3"},{"fixed":"13.4.19-aikido.5"},{"fixed":"14.0.0-aikido.2"},{"fixed":"14.2.31-aikido.4"},{"fixed":"14.2.29-aikido.2"},{"fixed":"13.5.4-aikido.4"},{"fixed":"14.2.21-aikido.1"},{"fixed":"14.2.16-aikido.1"},{"fixed":"14.1.3-aikido.3"},{"fixed":"13.3.0-aikido.8"},{"fixed":"13.1.6-aikido.2"},{"fixed":"14.2.21-aikido.3"},{"fixed":"13.2.4-aikido.6"},{"fixed":"14.2.32-aikido.3"},{"fixed":"14.2.29-aikido.3"},{"fixed":"13.5.11-aikido.9"},{"fixed":"14.1.3-aikido.4"},{"fixed":"14.2.0-aikido.4"},{"fixed":"14.2.30-aikido.6"},{"fixed":"14.2.28-aikido.4"},{"fixed":"14.2.33-aikido.6"},{"fixed":"14.1.0-aikido.6"},{"fixed":"14.2.35-aikido.8"},{"fixed":"14.2.35-aikido.4"},{"fixed":"14.2.35-aikido.1"},{"fixed":"14.2.18-aikido.5"},{"fixed":"13.5.6-aikido.7"},{"fixed":"14.2.35-aikido.10"},{"fixed":"14.2.35-aikido.11"},{"fixed":"15.5.10-aikido.4"},{"fixed":"15.5.10-aikido.5"},{"fixed":"15.5.10-aikido.6"},{"fixed":"15.5.10-aikido.3"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-root.io.5"},{"fixed":"14.2.5-root.io.8"},{"fixed":"14.2.33-root.io.2"},{"fixed":"14.2.32-root.io.4"},{"fixed":"14.2.35-root.io.9"},{"fixed":"14.2.30-root.io.7"},{"fixed":"14.2.26-root.io.6"},{"fixed":"14.2.26-root.io.4"},{"fixed":"14.2.30-root.io.10"},{"fixed":"13.4.19-root.io.6"},{"fixed":"13.4.19-root.io.7"},{"fixed":"14.2.10-root.io.3"},{"fixed":"14.2.13-root.io.3"},{"fixed":"14.0.4-root.io.6"},{"fixed":"14.2.15-root.io.4"},{"fixed":"14.0.4-root.io.9"},{"fixed":"14.1.3-root.io.2"},{"fixed":"14.2.25-root.io.2"},{"fixed":"14.2.24-root.io.2"},{"fixed":"14.2.18-root.io.2"},{"fixed":"13.3.0-root.io.5"},{"fixed":"14.2.15-root.io.3"},{"fixed":"14.0.4-root.io.5"},{"fixed":"14.0.4-root.io.7"},{"fixed":"14.0.4-root.io.2"},{"fixed":"14.1.0-root.io.7"},{"fixed":"14.1.0-root.io.8"},{"fixed":"14.0.4-root.io.3"},{"fixed":"14.2.13-root.io.1"},{"fixed":"14.2.32-root.io.1"},{"fixed":"14.2.3-root.io.5"},{"fixed":"14.2.0-root.io.2"},{"fixed":"14.0.3-root.io.3"},{"fixed":"14.2.5-root.io.9"},{"fixed":"14.2.5-root.io.10"},{"fixed":"14.2.2-root.io.7"},{"fixed":"14.2.33-root.io.1"},{"fixed":"14.1.3-root.io.5"},{"fixed":"14.2.29-root.io.1"},{"fixed":"14.2.29-root.io.5"},{"fixed":"14.2.31-root.io.2"},{"fixed":"14.0.0-root.io.7"},{"fixed":"14.2.10-root.io.4"},{"fixed":"14.2.13-root.io.4"},{"fixed":"14.2.18-root.io.6"},{"fixed":"14.2.21-root.io.6"},{"fixed":"14.2.16-root.io.6"},{"fixed":"14.1.4-root.io.5"},{"fixed":"14.2.25-root.io.1"},{"fixed":"13.2.4-root.io.3"},{"fixed":"14.2.0-root.io.6"},{"fixed":"14.0.4-root.io.4"},{"fixed":"14.2.31-root.io.5"},{"fixed":"14.2.0-root.io.5"},{"fixed":"14.2.2-root.io.9"},{"fixed":"14.2.30-root.io.8"},{"fixed":"13.1.6-root.io.1"},{"fixed":"13.2.4-root.io.4"},{"fixed":"14.0.3-root.io.6"},{"fixed":"14.2.32-root.io.5"},{"fixed":"14.2.33-root.io.3"},{"fixed":"14.0.0-root.io.5"},{"fixed":"14.2.5-root.io.3"},{"fixed":"14.2.3-root.io.3"},{"fixed":"13.5.4-root.io.5"},{"fixed":"14.2.2-root.io.5"},{"fixed":"13.5.11-root.io.7"},{"fixed":"14.2.2-root.io.6"},{"fixed":"14.2.30-root.io.1"},{"fixed":"14.2.30-root.io.2"},{"fixed":"14.1.3-root.io.6"},{"fixed":"14.2.5-root.io.4"},{"fixed":"13.3.0-root.io.6"},{"fixed":"14.2.30-root.io.3"},{"fixed":"14.0.3-root.io.4"},{"fixed":"14.2.13-root.io.2"},{"fixed":"14.2.5-root.io.6"},{"fixed":"14.2.21-root.io.4"},{"fixed":"14.0.0-root.io.3"},{"fixed":"14.1.4-root.io.7"},{"fixed":"14.2.21-root.io.2"},{"fixed":"14.2.16-root.io.2"},{"fixed":"14.2.16-root.io.4"},{"fixed":"13.5.4-root.io.2"},{"fixed":"14.2.35-root.io.5"},{"fixed":"14.2.30-root.io.4"},{"fixed":"13.2.4-root.io.5"},{"fixed":"13.3.0-root.io.7"},{"fixed":"14.2.33-root.io.4"},{"fixed":"14.2.26-root.io.3"},{"fixed":"14.0.3-root.io.5"},{"fixed":"14.2.30-root.io.9"},{"fixed":"14.1.4-root.io.8"},{"fixed":"14.2.35-root.io.3"},{"fixed":"14.2.32-root.io.6"},{"fixed":"14.2.35-root.io.6"},{"fixed":"13.5.4-root.io.6"},{"fixed":"14.1.3-root.io.7"},{"fixed":"14.2.16-root.io.5"},{"fixed":"14.0.0-root.io.6"},{"fixed":"14.2.21-root.io.5"},{"fixed":"14.2.5-root.io.7"},{"fixed":"14.2.3-root.io.4"},{"fixed":"14.2.2-root.io.8"},{"fixed":"13.4.19-root.io.4"},{"fixed":"14.2.15-root.io.5"},{"fixed":"14.2.30-root.io.5"},{"fixed":"14.2.3-root.io.2"},{"fixed":"14.2.28-root.io.5"},{"fixed":"14.2.32-root.io.2"},{"fixed":"14.1.4-root.io.9"},{"fixed":"14.2.32-root.io.7"},{"fixed":"13.5.6-root.io.5"},{"fixed":"14.2.15-root.io.6"},{"fixed":"13.2.4-root.io.7"},{"fixed":"14.1.3-root.io.8"},{"fixed":"14.2.32-root.io.8"},{"fixed":"14.2.29-root.io.4"},{"fixed":"14.2.28-root.io.1"},{"fixed":"14.2.33-root.io.5"},{"fixed":"14.2.35-root.io.2"},{"fixed":"13.5.6-root.io.6"},{"fixed":"13.5.11-root.io.8"},{"fixed":"14.2.26-root.io.5"},{"fixed":"14.2.28-root.io.2"},{"fixed":"14.2.26-root.io.2"},{"fixed":"14.0.4-root.io.8"},{"fixed":"14.2.28-root.io.3"},{"fixed":"14.2.31-root.io.3"},{"fixed":"14.2.35-root.io.7"},{"fixed":"14.1.4-root.io.6"},{"fixed":"14.2.18-root.io.3"},{"fixed":"14.1.0-root.io.5"},{"fixed":"14.2.16-root.io.3"},{"fixed":"14.0.0-root.io.4"},{"fixed":"14.2.18-root.io.4"},{"fixed":"13.5.4-root.io.3"},{"fixed":"14.2.0-root.io.3"},{"fixed":"13.4.19-root.io.5"},{"fixed":"14.0.0-root.io.2"},{"fixed":"14.2.31-root.io.4"},{"fixed":"14.2.29-root.io.2"},{"fixed":"13.5.4-root.io.4"},{"fixed":"14.2.21-root.io.1"},{"fixed":"14.1.3-root.io.3"},{"fixed":"14.2.16-root.io.1"},{"fixed":"13.3.0-root.io.8"},{"fixed":"13.1.6-root.io.2"},{"fixed":"14.2.21-root.io.3"},{"fixed":"13.2.4-root.io.6"},{"fixed":"14.2.32-root.io.3"},{"fixed":"14.2.29-root.io.3"},{"fixed":"13.5.11-root.io.9"},{"fixed":"14.1.3-root.io.4"},{"fixed":"14.2.0-root.io.4"},{"fixed":"14.2.30-root.io.6"},{"fixed":"14.2.33-root.io.6"},{"fixed":"14.2.28-root.io.4"},{"fixed":"14.1.0-root.io.6"},{"fixed":"14.2.35-root.io.8"},{"fixed":"14.2.35-root.io.4"},{"fixed":"13.5.6-root.io.7"},{"fixed":"14.2.35-root.io.1"},{"fixed":"14.2.18-root.io.5"},{"fixed":"14.2.35-root.io.10"},{"fixed":"14.2.35-root.io.11"},{"fixed":"15.5.10-root.io.4"},{"fixed":"15.5.10-root.io.5"},{"fixed":"15.5.10-root.io.6"},{"fixed":"15.5.10-root.io.3"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-aikido.8"},{"fixed":"14.2.33-aikido.2"},{"fixed":"14.2.32-aikido.4"},{"fixed":"14.2.35-aikido.9"},{"fixed":"14.2.30-aikido.7"},{"fixed":"14.2.26-aikido.6"},{"fixed":"14.2.26-aikido.4"},{"fixed":"14.2.30-aikido.10"},{"fixed":"13.4.19-aikido.6"},{"fixed":"13.4.19-aikido.7"},{"fixed":"14.2.10-aikido.3"},{"fixed":"14.2.13-aikido.3"},{"fixed":"14.0.4-aikido.6"},{"fixed":"14.0.4-aikido.9"},{"fixed":"13.4.19-aikido.2"},{"fixed":"14.1.3-aikido.2"},{"fixed":"14.2.24-aikido.2"},{"fixed":"14.2.25-aikido.2"},{"fixed":"14.1.0-aikido.4"},{"fixed":"13.3.0-aikido.5"},{"fixed":"13.4.19-aikido.3"},{"fixed":"14.0.4-aikido.5"},{"fixed":"14.0.4-aikido.7"},{"fixed":"14.1.0-aikido.7"},{"fixed":"14.1.0-aikido.8"},{"fixed":"14.2.32-aikido.1"},{"fixed":"14.2.3-aikido.5"},{"fixed":"14.0.3-aikido.3"},{"fixed":"14.2.5-aikido.9"},{"fixed":"14.2.5-aikido.10"},{"fixed":"14.2.2-aikido.7"},{"fixed":"14.2.33-aikido.1"},{"fixed":"14.1.3-aikido.5"},{"fixed":"14.2.29-aikido.1"},{"fixed":"14.2.29-aikido.5"},{"fixed":"14.2.31-aikido.2"},{"fixed":"14.0.0-aikido.7"},{"fixed":"14.2.10-aikido.4"},{"fixed":"14.2.13-aikido.4"},{"fixed":"14.2.18-aikido.6"},{"fixed":"14.2.21-aikido.6"},{"fixed":"14.2.16-aikido.6"},{"fixed":"14.2.25-aikido.1"},{"fixed":"14.2.0-aikido.6"},{"fixed":"14.2.31-aikido.5"},{"fixed":"14.2.2-aikido.9"},{"fixed":"14.2.30-aikido.8"},{"fixed":"13.1.6-aikido.1"},{"fixed":"14.2.24-aikido.7"},{"fixed":"14.2.24-aikido.4"},{"fixed":"14.0.3-aikido.6"},{"fixed":"14.2.32-aikido.5"},{"fixed":"14.2.33-aikido.3"},{"fixed":"14.0.0-aikido.5"},{"fixed":"14.2.3-aikido.3"},{"fixed":"14.2.2-aikido.4"},{"fixed":"14.2.2-aikido.5"},{"fixed":"13.5.11-aikido.7"},{"fixed":"14.2.2-aikido.6"},{"fixed":"13.5.4-aikido.5"},{"fixed":"14.0.0-aikido.1"},{"fixed":"14.1.3-aikido.6"},{"fixed":"13.3.0-aikido.1"},{"fixed":"13.3.0-aikido.6"},{"fixed":"13.4.19-aikido.1"},{"fixed":"14.0.3-aikido.4"},{"fixed":"13.5.11-aikido.4"},{"fixed":"14.0.3-aikido.1"},{"fixed":"14.2.21-aikido.4"},{"fixed":"13.5.6-aikido.1"},{"fixed":"14.0.0-aikido.3"},{"fixed":"14.1.4-aikido.7"},{"fixed":"13.5.4-aikido.1"},{"fixed":"14.2.21-aikido.2"},{"fixed":"13.3.0-aikido.2"},{"fixed":"14.2.16-aikido.2"},{"fixed":"14.2.16-aikido.4"},{"fixed":"13.5.4-aikido.2"},{"fixed":"14.2.35-aikido.5"},{"fixed":"13.5.6-aikido.2"},{"fixed":"14.2.30-aikido.4"},{"fixed":"13.3.0-aikido.7"},{"fixed":"14.2.33-aikido.4"},{"fixed":"14.2.26-aikido.3"},{"fixed":"14.0.3-aikido.5"},{"fixed":"14.2.30-aikido.9"},{"fixed":"15.5.10-aikido.4"},{"fixed":"14.1.4-aikido.8"},{"fixed":"14.2.35-aikido.3"},{"fixed":"14.2.32-aikido.6"},{"fixed":"14.2.35-aikido.6"},{"fixed":"13.5.4-aikido.6"},{"fixed":"14.2.24-aikido.5"},{"fixed":"14.1.3-aikido.7"},{"fixed":"14.2.16-aikido.5"},{"fixed":"14.0.0-aikido.6"},{"fixed":"14.2.21-aikido.5"},{"fixed":"14.2.3-aikido.4"},{"fixed":"14.2.2-aikido.8"},{"fixed":"13.4.19-aikido.4"},{"fixed":"14.2.15-aikido.5"},{"fixed":"14.2.30-aikido.5"},{"fixed":"14.2.3-aikido.2"},{"fixed":"13.5.6-aikido.3"},{"fixed":"13.5.6-aikido.4"},{"fixed":"15.5.10-aikido.5"},{"fixed":"14.2.28-aikido.5"},{"fixed":"14.2.24-aikido.1"},{"fixed":"14.2.32-aikido.2"},{"fixed":"14.1.4-aikido.9"},{"fixed":"16.1.6-aikido.4"},{"fixed":"14.1.3-aikido.1"},{"fixed":"16.1.7-aikido.1"},{"fixed":"13.3.0-aikido.3"},{"fixed":"14.2.32-aikido.7"},{"fixed":"13.5.6-aikido.5"},{"fixed":"14.2.15-aikido.6"},{"fixed":"16.1.6-aikido.5"},{"fixed":"14.1.3-aikido.8"},{"fixed":"13.2.4-aikido.7"},{"fixed":"14.2.32-aikido.8"},{"fixed":"14.2.29-aikido.4"},{"fixed":"14.2.35-aikido.2"},{"fixed":"14.2.33-aikido.5"},{"fixed":"13.5.6-aikido.6"},{"fixed":"13.5.11-aikido.8"},{"fixed":"14.2.26-aikido.5"},{"fixed":"15.5.10-aikido.6"},{"fixed":"14.0.4-aikido.8"},{"fixed":"14.2.28-aikido.3"},{"fixed":"14.2.31-aikido.3"},{"fixed":"14.2.24-aikido.6"},{"fixed":"14.1.4-aikido.6"},{"fixed":"14.2.35-aikido.7"},{"fixed":"14.2.18-aikido.3"},{"fixed":"13.3.0-aikido.4"},{"fixed":"14.1.0-aikido.5"},{"fixed":"16.1.7-aikido.2"},{"fixed":"14.2.16-aikido.3"},{"fixed":"14.0.0-aikido.4"},{"fixed":"13.5.11-aikido.5"},{"fixed":"14.1.0-aikido.3"},{"fixed":"13.5.11-aikido.6"},{"fixed":"14.2.18-aikido.4"},{"fixed":"13.5.4-aikido.3"},{"fixed":"13.4.19-aikido.5"},{"fixed":"14.0.0-aikido.2"},{"fixed":"16.1.6-aikido.6"},{"fixed":"14.2.31-aikido.4"},{"fixed":"14.2.29-aikido.2"},{"fixed":"13.5.4-aikido.4"},{"fixed":"14.2.21-aikido.1"},{"fixed":"16.1.6-aikido.7"},{"fixed":"16.1.7-aikido.3"},{"fixed":"14.1.3-aikido.3"},{"fixed":"13.3.0-aikido.8"},{"fixed":"14.2.24-aikido.3"},{"fixed":"13.1.6-aikido.2"},{"fixed":"14.2.21-aikido.3"},{"fixed":"14.2.32-aikido.3"},{"fixed":"14.2.29-aikido.3"},{"fixed":"13.5.11-aikido.9"},{"fixed":"14.0.3-aikido.2"},{"fixed":"14.1.3-aikido.4"},{"fixed":"14.2.30-aikido.6"},{"fixed":"14.2.28-aikido.4"},{"fixed":"14.2.33-aikido.6"},{"fixed":"14.1.0-aikido.6"},{"fixed":"14.2.35-aikido.8"},{"fixed":"14.2.35-aikido.4"},{"fixed":"15.5.10-aikido.3"},{"fixed":"16.1.6-aikido.8"},{"fixed":"14.2.18-aikido.5"},{"fixed":"13.5.6-aikido.7"},{"fixed":"14.2.35-aikido.10"},{"fixed":"14.2.35-aikido.11"},{"fixed":"15.5.15-aikido.2"},{"fixed":"15.5.15-aikido.3"},{"fixed":"15.5.15-aikido.4"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-root.io.8"},{"fixed":"14.2.33-root.io.2"},{"fixed":"14.2.32-root.io.4"},{"fixed":"14.2.35-root.io.9"},{"fixed":"14.2.30-root.io.7"},{"fixed":"14.2.26-root.io.6"},{"fixed":"14.2.26-root.io.4"},{"fixed":"14.2.30-root.io.10"},{"fixed":"13.4.19-root.io.6"},{"fixed":"13.4.19-root.io.7"},{"fixed":"14.2.10-root.io.3"},{"fixed":"14.2.13-root.io.3"},{"fixed":"14.0.4-root.io.6"},{"fixed":"14.0.4-root.io.9"},{"fixed":"13.4.19-root.io.2"},{"fixed":"14.1.3-root.io.2"},{"fixed":"14.2.25-root.io.2"},{"fixed":"14.2.24-root.io.2"},{"fixed":"14.1.0-root.io.4"},{"fixed":"13.3.0-root.io.5"},{"fixed":"14.0.4-root.io.5"},{"fixed":"13.4.19-root.io.3"},{"fixed":"14.0.4-root.io.7"},{"fixed":"14.1.0-root.io.7"},{"fixed":"14.1.0-root.io.8"},{"fixed":"14.2.32-root.io.1"},{"fixed":"14.2.3-root.io.5"},{"fixed":"14.0.3-root.io.3"},{"fixed":"14.2.5-root.io.9"},{"fixed":"14.2.5-root.io.10"},{"fixed":"14.2.2-root.io.7"},{"fixed":"14.2.33-root.io.1"},{"fixed":"14.1.3-root.io.5"},{"fixed":"14.2.29-root.io.1"},{"fixed":"14.2.29-root.io.5"},{"fixed":"14.2.31-root.io.2"},{"fixed":"14.0.0-root.io.7"},{"fixed":"14.2.10-root.io.4"},{"fixed":"14.2.13-root.io.4"},{"fixed":"14.2.18-root.io.6"},{"fixed":"14.2.21-root.io.6"},{"fixed":"14.2.16-root.io.6"},{"fixed":"14.2.25-root.io.1"},{"fixed":"14.2.0-root.io.6"},{"fixed":"14.2.31-root.io.5"},{"fixed":"14.2.2-root.io.9"},{"fixed":"14.2.30-root.io.8"},{"fixed":"13.1.6-root.io.1"},{"fixed":"14.2.24-root.io.7"},{"fixed":"14.2.24-root.io.4"},{"fixed":"14.0.3-root.io.6"},{"fixed":"14.2.32-root.io.5"},{"fixed":"14.2.33-root.io.3"},{"fixed":"14.0.0-root.io.5"},{"fixed":"16.1.6-root.io.1"},{"fixed":"16.1.6-root.io.2"},{"fixed":"16.1.6-root.io.3"},{"fixed":"14.2.3-root.io.3"},{"fixed":"14.2.2-root.io.4"},{"fixed":"13.5.4-root.io.5"},{"fixed":"14.2.2-root.io.5"},{"fixed":"13.5.11-root.io.7"},{"fixed":"14.2.2-root.io.6"},{"fixed":"14.0.0-root.io.1"},{"fixed":"14.1.3-root.io.6"},{"fixed":"13.3.0-root.io.1"},{"fixed":"13.3.0-root.io.6"},{"fixed":"13.4.19-root.io.1"},{"fixed":"14.0.3-root.io.4"},{"fixed":"13.5.11-root.io.4"},{"fixed":"14.0.3-root.io.1"},{"fixed":"14.2.21-root.io.4"},{"fixed":"13.5.6-root.io.1"},{"fixed":"14.0.0-root.io.3"},{"fixed":"14.1.4-root.io.7"},{"fixed":"13.5.4-root.io.1"},{"fixed":"14.2.21-root.io.2"},{"fixed":"13.3.0-root.io.2"},{"fixed":"14.2.16-root.io.2"},{"fixed":"14.2.16-root.io.4"},{"fixed":"13.5.4-root.io.2"},{"fixed":"14.2.35-root.io.5"},{"fixed":"13.5.6-root.io.2"},{"fixed":"14.2.30-root.io.4"},{"fixed":"13.3.0-root.io.7"},{"fixed":"14.2.33-root.io.4"},{"fixed":"14.2.26-root.io.3"},{"fixed":"14.0.3-root.io.5"},{"fixed":"14.2.30-root.io.9"},{"fixed":"15.5.10-root.io.4"},{"fixed":"14.1.4-root.io.8"},{"fixed":"14.2.35-root.io.3"},{"fixed":"14.2.32-root.io.6"},{"fixed":"14.2.35-root.io.6"},{"fixed":"13.5.4-root.io.6"},{"fixed":"14.2.24-root.io.5"},{"fixed":"14.1.3-root.io.7"},{"fixed":"14.2.16-root.io.5"},{"fixed":"14.0.0-root.io.6"},{"fixed":"14.2.21-root.io.5"},{"fixed":"14.2.3-root.io.4"},{"fixed":"14.2.2-root.io.8"},{"fixed":"13.4.19-root.io.4"},{"fixed":"14.2.15-root.io.5"},{"fixed":"14.2.30-root.io.5"},{"fixed":"14.2.3-root.io.2"},{"fixed":"13.5.6-root.io.3"},{"fixed":"13.5.6-root.io.4"},{"fixed":"15.5.10-root.io.5"},{"fixed":"14.2.28-root.io.5"},{"fixed":"14.2.24-root.io.1"},{"fixed":"14.2.32-root.io.2"},{"fixed":"14.1.4-root.io.9"},{"fixed":"16.1.6-root.io.4"},{"fixed":"14.1.3-root.io.1"},{"fixed":"16.1.7-root.io.1"},{"fixed":"13.3.0-root.io.3"},{"fixed":"14.2.32-root.io.7"},{"fixed":"13.5.6-root.io.5"},{"fixed":"14.2.15-root.io.6"},{"fixed":"16.1.6-root.io.5"},{"fixed":"13.2.4-root.io.7"},{"fixed":"14.1.3-root.io.8"},{"fixed":"14.2.32-root.io.8"},{"fixed":"14.2.29-root.io.4"},{"fixed":"14.2.33-root.io.5"},{"fixed":"14.2.35-root.io.2"},{"fixed":"13.5.6-root.io.6"},{"fixed":"13.5.11-root.io.8"},{"fixed":"14.2.26-root.io.5"},{"fixed":"15.5.10-root.io.6"},{"fixed":"14.0.4-root.io.8"},{"fixed":"14.2.28-root.io.3"},{"fixed":"14.2.24-root.io.6"},{"fixed":"14.2.31-root.io.3"},{"fixed":"14.2.35-root.io.7"},{"fixed":"14.1.4-root.io.6"},{"fixed":"14.2.18-root.io.3"},{"fixed":"13.3.0-root.io.4"},{"fixed":"14.1.0-root.io.5"},{"fixed":"16.1.7-root.io.2"},{"fixed":"14.2.16-root.io.3"},{"fixed":"14.0.0-root.io.4"},{"fixed":"13.5.11-root.io.5"},{"fixed":"14.1.0-root.io.3"},{"fixed":"13.5.11-root.io.6"},{"fixed":"14.2.18-root.io.4"},{"fixed":"13.5.4-root.io.3"},{"fixed":"13.4.19-root.io.5"},{"fixed":"14.0.0-root.io.2"},{"fixed":"14.2.31-root.io.4"},{"fixed":"16.1.6-root.io.6"},{"fixed":"14.2.29-root.io.2"},{"fixed":"13.5.4-root.io.4"},{"fixed":"14.2.21-root.io.1"},{"fixed":"14.1.3-root.io.3"},{"fixed":"16.1.6-root.io.7"},{"fixed":"16.1.7-root.io.3"},{"fixed":"13.3.0-root.io.8"},{"fixed":"14.2.24-root.io.3"},{"fixed":"13.1.6-root.io.2"},{"fixed":"14.2.21-root.io.3"},{"fixed":"14.2.32-root.io.3"},{"fixed":"14.2.29-root.io.3"},{"fixed":"13.5.11-root.io.9"},{"fixed":"14.0.3-root.io.2"},{"fixed":"14.1.3-root.io.4"},{"fixed":"14.2.30-root.io.6"},{"fixed":"14.2.33-root.io.6"},{"fixed":"14.2.28-root.io.4"},{"fixed":"14.1.0-root.io.6"},{"fixed":"14.2.35-root.io.8"},{"fixed":"14.2.35-root.io.4"},{"fixed":"15.5.10-root.io.3"},{"fixed":"13.5.6-root.io.7"},{"fixed":"16.1.6-root.io.8"},{"fixed":"14.2.18-root.io.5"},{"fixed":"14.2.35-root.io.10"},{"fixed":"14.2.35-root.io.11"},{"fixed":"15.5.15-root.io.1"},{"fixed":"15.5.15-root.io.2"},{"fixed":"15.5.15-root.io.3"},{"fixed":"15.5.15-root.io.4"}]}]}],"products":[{"vendor":"vercel","product":"next.js"}],"references":[{"url":"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h","tags":["x_refsource_CONFIRM","Mitigation","Vendor Advisory","advisory","web"]},{"url":"https://github.com/facebook/react/security/advisories/GHSA-rv78-f8rc-xrxh","tags":["web"]},{"url":"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj","tags":["web"]},{"url":"https://github.com/vitejs/vite-plugin-react/security/advisories/GHSA-w94c-4vhp-22gx","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23870","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8h8q-6873-q5fj"},{"url":"https://github.com/vercel/next.js/releases/tag/v15.5.16","tags":["web"]},{"url":"https://github.com/vercel/next.js/releases/tag/v16.2.5","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44580","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gx5p-jg67-6x7h"},{"url":"https://github.com/facebook/react/security/advisories/GHSA-83fc-fqcc-2hmg","tags":["web"]},{"url":"https://github.com/vercel/next.js/security/advisories/GHSA-h25m-26qc-wcjf","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23864","tags":["advisory"]},{"url":"https://vercel.com/changelog/summary-of-cve-2026-23864","tags":["web"]},{"url":"https://github.com/advisories/GHSA-h25m-26qc-wcjf"},{"url":"https://github.com/vercel/next.js/security/advisories/GHSA-q4gf-8mx6-v5v3","tags":["web"]},{"url":"https://vercel.com/changelog/summary-of-cve-2026-23869","tags":["web"]},{"url":"https://github.com/advisories/GHSA-q4gf-8mx6-v5v3"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44580.json","tags":["advisory"]},{"url":"https://github.com/vercel/next.js","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2026-44580","title":"Next.js: Cross-site scripting in beforeInteractive scripts with untrusted input","description":"Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be vulnerable to cross-site scripting. In affected versions, serialized script content was not escaped safely before being embedded into the document, which could allow attacker-controlled input to break out of the intended script context and execute arbitrary JavaScript in a visitor's browser. This vulnerability is fixed in 15.5.16 and 16.2.5.","status":"published","published":"2026-05-13T17:06:05.772Z","modified":"2026-05-13T18:28:15.512Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T13:42:49.132798Z"}],"euvd":[{"id":"EUVD-2026-30082","description":"Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be vulnerable to cross-site scripting. In affected versions, serialized script content was not escaped safely before being embedded into the document, which could allow attacker-controlled input to break out of the intended script context and execute arbitrary JavaScript in a visitor's browser. This vulnerability is fixed in 15.5.16 and 16.2.5.","status":"published","published":"2026-05-13T17:06:05Z","modified":"2026-05-13T18:28:15Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:04:33.260537Z"}],"ghsa":[{"id":"GHSA-8h8q-6873-q5fj","title":"Next.js Vulnerable to Denial of Service with Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23870](https://github.com/facebook/react/security/advisories/GHSA-rv78-f8rc-xrxh). \n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.","status":"published","published":"2026-05-11T14:50:27Z","modified":"2026-05-11T14:50:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:40:05.816188Z"},{"id":"GHSA-gx5p-jg67-6x7h","title":"Next.js has cross-site scripting in beforeInteractive scripts with untrusted input","description":"### Impact\n\nApplications that use `beforeInteractive` scripts together with untrusted content can be vulnerable to cross-site scripting. In affected versions, serialized script content was not escaped safely before being embedded into the document, which could allow attacker-controlled input to break out of the intended script context and execute arbitrary JavaScript in a visitor's browser.\n\n### Fix\n\nWe now HTML-escape serialized `beforeInteractive` script content before embedding it into the page, preventing attacker-controlled content from breaking out of the inline script boundary.\n\n### Workarounds\n\nIf you cannot upgrade immediately, do not pass untrusted data into `beforeInteractive` scripts. If that pattern is unavoidable, sanitize or escape the content before embedding it.","status":"published","published":"2026-05-11T15:56:38Z","modified":"2026-05-14T20:38:30Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:40:09.033429Z"},{"id":"GHSA-h25m-26qc-wcjf","title":"Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.0.x, 19.1.x, and 19.2.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23864](https://github.com/facebook/react/security/advisories/GHSA-83fc-fqcc-2hmg).\n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage, out-of-memory exceptions, or server crashes. This can result in denial of service in unpatched environments.","status":"published","published":"2026-01-28T15:38:01Z","modified":"2026-01-28T15:38:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400","CWE-502"],"updated_at":"2026-11-02T14:39:20.563096Z"},{"id":"GHSA-q4gf-8mx6-v5v3","title":"Next.js has a Denial of Service with Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23869](https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg). You can read more about this advisory our [this changelog](https://vercel.com/changelog/summary-of-cve-2026-23869).\n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.","status":"published","published":"2026-04-10T15:35:47Z","modified":"2026-04-10T15:35:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:39:52.102227Z"}],"nvd":[{"id":"CVE-2026-44580","description":"Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be vulnerable to cross-site scripting. In affected versions, serialized script content was not escaped safely before being embedded into the document, which could allow attacker-controlled input to break out of the intended script context and execute arbitrary JavaScript in a visitor's browser. This vulnerability is fixed in 15.5.16 and 16.2.5.","status":"published","published":"2026-05-13T18:16:18.26Z","modified":"2026-10-26T14:10:00.13Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:12:19.020465Z"}],"osv":[{"id":"CVE-2026-44580","title":"Next.js: Cross-site scripting in beforeInteractive scripts with untrusted input","description":"Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be vulnerable to cross-site scripting. In affected versions, serialized script content was not escaped safely before being embedded into the document, which could allow attacker-controlled input to break out of the intended script context and execute arbitrary JavaScript in a visitor's browser. This vulnerability is fixed in 15.5.16 and 16.2.5.","status":"published","published":"2026-05-13T17:06:05.772Z","modified":"2026-10-28T02:30:24.470884985Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:45:05.172514Z"},{"id":"GHSA-8h8q-6873-q5fj","title":"Next.js Vulnerable to Denial of Service with Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23870](https://github.com/facebook/react/security/advisories/GHSA-rv78-f8rc-xrxh). \n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.","status":"published","published":"2026-05-11T14:50:27Z","modified":"2026-09-10T03:51:04.979274056Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:46:42.437513Z"},{"id":"GHSA-gx5p-jg67-6x7h","title":"Next.js has cross-site scripting in beforeInteractive scripts with untrusted input","description":"### Impact\n\nApplications that use `beforeInteractive` scripts together with untrusted content can be vulnerable to cross-site scripting. In affected versions, serialized script content was not escaped safely before being embedded into the document, which could allow attacker-controlled input to break out of the intended script context and execute arbitrary JavaScript in a visitor's browser.\n\n### Fix\n\nWe now HTML-escape serialized `beforeInteractive` script content before embedding it into the page, preventing attacker-controlled content from breaking out of the inline script boundary.\n\n### Workarounds\n\nIf you cannot upgrade immediately, do not pass untrusted data into `beforeInteractive` scripts. If that pattern is unavoidable, sanitize or escape the content before embedding it.","status":"published","published":"2026-05-11T15:56:38Z","modified":"2026-09-10T03:51:05.78514322Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:48.191583Z"},{"id":"GHSA-h25m-26qc-wcjf","title":"Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.0.x, 19.1.x, and 19.2.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23864](https://github.com/facebook/react/security/advisories/GHSA-83fc-fqcc-2hmg).\n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage, out-of-memory exceptions, or server crashes. This can result in denial of service in unpatched environments.","status":"published","published":"2026-01-28T15:38:01Z","modified":"2026-09-10T03:50:33.105717591Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400","CWE-502"],"updated_at":"2026-11-02T15:46:48.546324Z"},{"id":"GHSA-q4gf-8mx6-v5v3","title":"Next.js has a Denial of Service with Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23869](https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg). You can read more about this advisory our [this changelog](https://vercel.com/changelog/summary-of-cve-2026-23869).\n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.","status":"published","published":"2026-04-10T15:35:47Z","modified":"2026-09-10T03:51:02.717818177Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:46:54.055966Z"},{"id":"CLSA-2026-1786360051","title":"TuxCare security update for 13 packages (13 CVEs)","description":"TuxCare rebuilt 13 packages to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"withdrawn","published":"2026-08-10T11:07:31Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1786995617","title":"TuxCare security update for 22 packages (9 CVEs)","description":"TuxCare rebuilt 22 packages to address 9 CVEs. Fixed in 16.0.6-tuxcare.7.","status":"withdrawn","published":"2026-08-17T19:40:17Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1791807020","title":"TuxCare security update for 9 packages (28 CVEs)","description":"TuxCare rebuilt 9 packages to address 28 CVEs. Fixed in 15.1.2-tuxcare.2.","status":"withdrawn","published":"2026-10-12T12:10:20Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1792195727","title":"TuxCare security update for create-next-app (13 CVEs)","description":"TuxCare rebuilt create-next-app to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-17T00:08:44Z","modified":"2026-10-17T01:30:11.397473767Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"CLSA-2026-1792195750","title":"TuxCare security update for create-next-app (9 CVEs)","description":"TuxCare rebuilt create-next-app to address 9 CVEs. Fixed in 16.0.6-tuxcare.7.","status":"published","published":"2026-10-17T00:09:06Z","modified":"2026-10-17T01:30:11.401593394Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"CLSA-2026-1792196726","title":"TuxCare security update for @next/eslint-plugin-next (13 CVEs)","description":"TuxCare rebuilt @next/eslint-plugin-next to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-17T00:25:23Z","modified":"2026-10-17T01:30:11.610605589Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"CLSA-2026-1792196728","title":"TuxCare security update for @next/eslint-plugin-next (9 CVEs)","description":"TuxCare rebuilt @next/eslint-plugin-next to address 9 CVEs. Fixed in 16.0.6-tuxcare.7.","status":"published","published":"2026-10-17T00:25:24Z","modified":"2026-10-17T01:30:11.55390341Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"CLSA-2026-1792206290","title":"TuxCare security update for @next/bundle-analyzer (13 CVEs)","description":"TuxCare rebuilt @next/bundle-analyzer to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-17T03:04:46Z","modified":"2026-10-17T07:00:39.779147959Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"CLSA-2026-1792206304","title":"TuxCare security update for @next/bundle-analyzer (9 CVEs)","description":"TuxCare rebuilt @next/bundle-analyzer to address 9 CVEs. Fixed in 16.0.6-tuxcare.7.","status":"published","published":"2026-10-17T03:05:03Z","modified":"2026-10-17T07:00:40.079556286Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"CLSA-2026-1792256964","title":"TuxCare security update for next-rspack (9 CVEs)","description":"TuxCare rebuilt next-rspack to address 9 CVEs. Fixed in 16.0.6-tuxcare.7.","status":"published","published":"2026-10-17T17:09:20Z","modified":"2026-10-17T19:00:44.322169627Z","updated_at":"2026-11-02T15:43:52.288832Z"},{"id":"CLSA-2026-1792272230","title":"TuxCare security update for @next/plugin-storybook (13 CVEs)","description":"TuxCare rebuilt @next/plugin-storybook to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-17T21:23:46Z","modified":"2026-10-18T01:30:33.988692137Z","updated_at":"2026-11-02T15:43:52.288832Z"},{"id":"CLSA-2026-1792272246","title":"TuxCare security update for @next/plugin-storybook (9 CVEs)","description":"TuxCare rebuilt @next/plugin-storybook to address 9 CVEs. Fixed in 16.0.6-tuxcare.7.","status":"published","published":"2026-10-17T21:24:04Z","modified":"2026-10-18T01:30:34.388375779Z","updated_at":"2026-11-02T15:43:52.288832Z"},{"id":"CLSA-2026-1792293000","title":"TuxCare security update for @next/polyfill-module (13 CVEs)","description":"TuxCare rebuilt @next/polyfill-module to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-18T03:09:58Z","modified":"2026-10-18T07:15:13.505132195Z","updated_at":"2026-11-02T15:43:52.288832Z"},{"id":"CLSA-2026-1792293016","title":"TuxCare security update for @next/polyfill-module (9 CVEs)","description":"TuxCare rebuilt @next/polyfill-module to address 9 CVEs. Fixed in 16.0.6-tuxcare.7.","status":"published","published":"2026-10-18T03:10:14Z","modified":"2026-10-18T07:15:11.70271409Z","updated_at":"2026-11-02T15:43:52.288832Z"},{"id":"CLSA-2026-1792304720","title":"TuxCare security update for @next/polyfill-nomodule (13 CVEs)","description":"TuxCare rebuilt @next/polyfill-nomodule to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-18T06:25:16Z","modified":"2026-10-18T07:15:15.101132848Z","updated_at":"2026-11-02T15:43:52.545698Z"},{"id":"CLSA-2026-1792304741","title":"TuxCare security update for @next/polyfill-nomodule (9 CVEs)","description":"TuxCare rebuilt @next/polyfill-nomodule to address 9 CVEs. Fixed in 16.0.6-tuxcare.7.","status":"published","published":"2026-10-18T06:25:39Z","modified":"2026-10-18T07:15:17.099092408Z","updated_at":"2026-11-02T15:43:52.545698Z"},{"id":"CLSA-2026-1792326302","title":"TuxCare security update for @next/react-refresh-utils (13 CVEs)","description":"TuxCare rebuilt @next/react-refresh-utils to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-18T12:25:02Z","modified":"2026-10-18T13:15:57.145529191Z","updated_at":"2026-11-02T15:43:52.545698Z"},{"id":"CLSA-2026-1792326304","title":"TuxCare security update for @next/react-refresh-utils (9 CVEs)","description":"TuxCare rebuilt @next/react-refresh-utils to address 9 CVEs. Fixed in 16.0.6-tuxcare.7.","status":"published","published":"2026-10-18T12:25:02Z","modified":"2026-10-18T13:15:59.504340743Z","updated_at":"2026-11-02T15:43:52.545698Z"},{"id":"CLSA-2026-1792338232","title":"TuxCare security update for @next/third-parties (13 CVEs)","description":"TuxCare rebuilt @next/third-parties to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-18T15:43:50Z","modified":"2026-10-18T19:15:40.050661554Z","updated_at":"2026-11-02T15:43:52.545698Z"},{"id":"CLSA-2026-1792338235","title":"TuxCare security update for @next/third-parties (9 CVEs)","description":"TuxCare rebuilt @next/third-parties to address 9 CVEs. Fixed in 16.0.6-tuxcare.7.","status":"published","published":"2026-10-18T15:43:51Z","modified":"2026-10-18T19:15:41.362849663Z","updated_at":"2026-11-02T15:43:52.545698Z"},{"id":"CLSA-2026-1792346470","title":"TuxCare security update for @next/swc-linux-x64-gnu (9 CVEs)","description":"TuxCare rebuilt @next/swc-linux-x64-gnu to address 9 CVEs. Fixed in 16.0.6-tuxcare.7.","status":"published","published":"2026-10-18T18:01:08Z","modified":"2026-10-18T19:16:07.414551087Z","updated_at":"2026-11-02T15:43:52.782414Z"},{"id":"CLSA-2026-1792346490","title":"TuxCare security update for @next/swc-linux-x64-gnu (28 CVEs)","description":"TuxCare rebuilt @next/swc-linux-x64-gnu to address 28 CVEs. Fixed in 15.1.2-tuxcare.2.","status":"published","published":"2026-10-18T18:01:28Z","modified":"2026-10-18T19:16:08.317178398Z","updated_at":"2026-11-02T15:43:52.782414Z"},{"id":"CLSA-2026-1792358596","title":"TuxCare security update for @next/codemod (13 CVEs)","description":"TuxCare rebuilt @next/codemod to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-18T21:23:16Z","modified":"2026-10-19T07:46:00.926214692Z","updated_at":"2026-11-02T15:43:53.071325Z"},{"id":"CLSA-2026-1792358599","title":"TuxCare security update for @next/codemod (9 CVEs)","description":"TuxCare rebuilt @next/codemod to address 9 CVEs. Fixed in 16.0.6-tuxcare.7.","status":"published","published":"2026-10-18T21:23:16Z","modified":"2026-10-19T07:46:00.627970311Z","updated_at":"2026-11-02T15:43:53.071325Z"},{"id":"CLSA-2026-1792364002","title":"TuxCare security update for @next/mdx (13 CVEs)","description":"TuxCare rebuilt @next/mdx to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-18T22:53:22Z","modified":"2026-10-19T07:46:07.293005453Z","updated_at":"2026-11-02T15:43:53.071325Z"},{"id":"CLSA-2026-1792364004","title":"TuxCare security update for @next/mdx (9 CVEs)","description":"TuxCare rebuilt @next/mdx to address 9 CVEs. Fixed in 16.0.6-tuxcare.7.","status":"published","published":"2026-10-18T22:53:22Z","modified":"2026-10-19T07:46:06.753283783Z","updated_at":"2026-11-02T15:43:53.071325Z"},{"id":"CLSA-2026-1792367391","title":"TuxCare security update for @next/swc-linux-arm64-gnu (9 CVEs)","description":"TuxCare rebuilt @next/swc-linux-arm64-gnu to address 9 CVEs. Fixed in 16.0.6-tuxcare.7.","status":"published","published":"2026-10-18T23:49:49Z","modified":"2026-10-19T07:46:32.203017239Z","updated_at":"2026-11-02T15:43:53.353888Z"},{"id":"CLSA-2026-1792367406","title":"TuxCare security update for @next/swc-linux-arm64-gnu (28 CVEs)","description":"TuxCare rebuilt @next/swc-linux-arm64-gnu to address 28 CVEs. Fixed in 15.1.2-tuxcare.2.","status":"published","published":"2026-10-18T23:50:05Z","modified":"2026-10-19T07:46:33.865755751Z","updated_at":"2026-11-02T15:43:53.353888Z"},{"id":"ROOT-APP-NPM-CVE-2026-44580","title":"CVE-2026-44580 in next - Patched by Root","description":"Root has patched CVE-2026-44580 in the next package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-09-28T07:43:05Z","modified":"2026-09-28T08:15:04.134532062Z","updated_at":"2026-11-02T15:53:27.649662Z"},{"id":"ROOT-APP-NPM-GHSA-8h8q-6873-q5fj","title":"GHSA-8h8q-6873-q5fj in next - Patched by Root","description":"Root has patched GHSA-8h8q-6873-q5fj in the next package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-11-02T10:42:42Z","modified":"2026-11-02T11:15:05.820234548Z","updated_at":"2026-11-02T15:53:27.940619Z"},{"id":"ROOT-APP-NPM-GHSA-h25m-26qc-wcjf","title":"GHSA-h25m-26qc-wcjf in next - Patched by Root","description":"Root has patched GHSA-h25m-26qc-wcjf in the next package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-11-02T10:42:42Z","modified":"2026-11-02T11:15:06.672348464Z","updated_at":"2026-11-02T15:53:27.940619Z"},{"id":"ROOT-APP-NPM-GHSA-q4gf-8mx6-v5v3","title":"GHSA-q4gf-8mx6-v5v3 in next - Patched by Root","description":"Root has patched GHSA-q4gf-8mx6-v5v3 in the next package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-11-02T10:42:42Z","modified":"2026-11-02T11:15:05.55154554Z","updated_at":"2026-11-02T15:53:27.940619Z"}]}}