{"id":"CVE-2026-64647","aliases":["CLSA-2026-1786360051","CLSA-2026-1786538556","CLSA-2026-1791807020","CLSA-2026-1792195727","CLSA-2026-1792195748","CLSA-2026-1792196726","CLSA-2026-1792196877","CLSA-2026-1792206290","CLSA-2026-1792206303","CLSA-2026-1792272230","CLSA-2026-1792272243","CLSA-2026-1792293000","CLSA-2026-1792293014","CLSA-2026-1792304720","CLSA-2026-1792304721","CLSA-2026-1792326296","CLSA-2026-1792326302","CLSA-2026-1792338232","CLSA-2026-1792338236","CLSA-2026-1792346490","CLSA-2026-1792358596","CLSA-2026-1792358597","CLSA-2026-1792364002","CLSA-2026-1792364003","CLSA-2026-1792367406","EUVD-2026-49404","GHSA-4633-3j49-mh5q","GHSA-8h8q-6873-q5fj","GHSA-h25m-26qc-wcjf","GHSA-q4gf-8mx6-v5v3","ROOT-APP-NPM-CVE-2026-64647","ROOT-APP-NPM-GHSA-8h8q-6873-q5fj","ROOT-APP-NPM-GHSA-h25m-26qc-wcjf","ROOT-APP-NPM-GHSA-q4gf-8mx6-v5v3"],"status":"published","title":"Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies","description":"Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may return a cached response body from a different request to the same URL but different body. Confidential data in the POST's response body would then leak to unauthorized requests. Though the request itself will not be deduped. This is only an issue when receiving request bodies with a content type charset other than UTF-8. For example, the UTF-16 byte sequences for 삃삃 and 섄섄 in the request body would share the same cache. This issue has been fixed in versions 15.5.21 and 16.2.11.","severity":{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00351,"percentile":0.29013,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-116","CWE-400","CWE-502","CWE-770"],"published":"2026-01-28T15:38:01Z","modified":"2026-11-10T19:58:26Z","fixes":[{"ecosystem":"npm","package":"next","fixed_in":["15.5.21","16.2.11","15.5.16","16.2.5","15.0.8","15.1.12","15.2.9","15.3.9","15.4.11","15.5.10","15.6.0-canary.61","16.0.11","16.1.5","15.5.15","16.2.3"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:npm","package":"@next/swc-linux-x64-gnu","fixed_in":["15.1.2-tuxcare.2"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@next/swc-linux-arm64-gnu","fixed_in":["15.1.2-tuxcare.2"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"next","fixed_in":["13.5.11-aikido.7","13.5.11-aikido.4","13.5.11-aikido.8","13.5.11-aikido.5","13.5.11-aikido.6","13.5.11-aikido.9","16.2.5-aikido.3","13.5.11-aikido.2","13.5.11-aikido.3","15.5.21-aikido.1","16.2.11-aikido.1","16.2.11-aikido.2","15.5.21-aikido.2","14.2.5-aikido.5","14.2.5-aikido.8","14.2.35-aikido.9","14.2.30-aikido.7","14.2.26-aikido.6","14.2.26-aikido.4","14.2.30-aikido.10","13.4.19-aikido.6","13.4.19-aikido.7","14.2.10-aikido.3","14.2.13-aikido.3","14.0.4-aikido.6","14.2.3-aikido.1","14.0.4-aikido.9","14.2.24-aikido.2","14.2.25-aikido.2","14.1.0-aikido.4","14.2.18-aikido.2","13.3.0-aikido.5","14.0.4-aikido.5","14.0.4-aikido.7","14.0.4-aikido.2","14.1.0-aikido.7","14.1.0-aikido.8","14.0.4-aikido.3","14.2.13-aikido.1","14.2.3-aikido.5","14.2.0-aikido.2","14.0.3-aikido.3","14.2.5-aikido.9","14.2.5-aikido.10","14.2.2-aikido.7","14.2.10-aikido.1","14.2.29-aikido.5","14.2.31-aikido.2","14.2.18-aikido.1","14.0.0-aikido.7","14.2.10-aikido.4","14.2.13-aikido.4","14.2.10-aikido.2","14.2.18-aikido.6","14.2.21-aikido.6","14.2.16-aikido.6","14.1.4-aikido.5","14.2.25-aikido.1","13.2.4-aikido.3","14.2.0-aikido.6","14.0.4-aikido.4","14.2.31-aikido.5","14.2.0-aikido.5","14.2.2-aikido.9","14.2.30-aikido.8","13.1.6-aikido.1","13.2.4-aikido.4","14.0.3-aikido.6","14.0.0-aikido.5","14.2.5-aikido.2","14.2.5-aikido.3","14.2.3-aikido.3","13.5.4-aikido.5","14.2.5-aikido.4","13.3.0-aikido.6","14.2.30-aikido.3","14.0.3-aikido.4","14.2.13-aikido.2","14.2.5-aikido.6","14.2.21-aikido.4","14.0.0-aikido.3","14.1.4-aikido.7","14.2.21-aikido.2","14.2.16-aikido.2","14.2.16-aikido.4","13.5.4-aikido.2","14.2.30-aikido.4","13.2.4-aikido.5","13.3.0-aikido.7","14.2.26-aikido.3","14.0.3-aikido.5","14.2.30-aikido.9","15.5.10-aikido.4","14.1.4-aikido.8","13.5.4-aikido.6","14.2.16-aikido.5","14.0.0-aikido.6","14.2.21-aikido.5","14.2.5-aikido.7","14.2.3-aikido.4","14.2.2-aikido.8","13.4.19-aikido.4","14.2.15-aikido.5","14.2.30-aikido.5","14.2.3-aikido.2","15.5.10-aikido.5","14.2.28-aikido.5","14.1.4-aikido.9","13.2.4-aikido.2","16.1.6-aikido.4","16.1.7-aikido.1","13.5.6-aikido.5","14.2.15-aikido.6","16.1.6-aikido.5","15.5.15-aikido.2","14.1.3-aikido.8","13.2.4-aikido.7","14.2.32-aikido.8","14.2.29-aikido.4","14.2.33-aikido.5","13.5.6-aikido.6","14.2.26-aikido.5","15.5.10-aikido.6","14.2.26-aikido.2","14.0.4-aikido.8","14.2.28-aikido.3","14.2.31-aikido.3","14.1.4-aikido.6","14.2.18-aikido.3","13.3.0-aikido.4","14.1.0-aikido.5","16.1.7-aikido.2","14.2.16-aikido.3","14.0.0-aikido.4","14.1.0-aikido.3","14.2.18-aikido.4","13.5.4-aikido.3","14.2.31-aikido.1","14.1.4-aikido.3","14.2.0-aikido.3","13.4.19-aikido.5","15.5.15-aikido.3","16.1.6-aikido.6","14.2.31-aikido.4","14.1.4-aikido.4","13.5.4-aikido.4","15.5.15-aikido.4","16.1.6-aikido.7","16.1.7-aikido.3","13.3.0-aikido.8","13.1.6-aikido.2","14.2.21-aikido.3","13.2.4-aikido.6","14.2.0-aikido.4","14.2.30-aikido.6","14.2.28-aikido.4","14.2.33-aikido.6","14.1.0-aikido.6","15.5.10-aikido.3","16.1.6-aikido.8","14.2.18-aikido.5","13.5.6-aikido.7","14.2.35-aikido.10","14.2.35-aikido.11","16.2.5-aikido.1","16.2.5-aikido.2","14.2.33-aikido.2","14.2.32-aikido.4","14.2.15-aikido.4","14.1.3-aikido.2","14.2.15-aikido.3","14.2.32-aikido.1","14.2.33-aikido.1","14.1.3-aikido.5","14.2.29-aikido.1","14.2.32-aikido.5","14.2.33-aikido.3","14.2.2-aikido.5","14.2.2-aikido.6","14.2.30-aikido.1","14.2.30-aikido.2","14.1.3-aikido.6","14.2.35-aikido.5","14.2.33-aikido.4","14.2.35-aikido.3","14.2.32-aikido.6","14.2.35-aikido.6","14.1.3-aikido.7","14.2.32-aikido.2","14.2.32-aikido.7","14.2.28-aikido.1","14.2.35-aikido.2","14.2.28-aikido.2","14.2.35-aikido.7","14.0.0-aikido.2","14.2.29-aikido.2","14.2.21-aikido.1","14.2.16-aikido.1","14.1.3-aikido.3","14.2.32-aikido.3","14.2.29-aikido.3","14.1.3-aikido.4","14.2.35-aikido.8","14.2.35-aikido.4","14.2.35-aikido.1","13.4.19-aikido.2","13.4.19-aikido.3","14.2.24-aikido.7","14.2.24-aikido.4","14.2.2-aikido.4","14.0.0-aikido.1","13.3.0-aikido.1","13.4.19-aikido.1","14.0.3-aikido.1","13.5.6-aikido.1","13.5.4-aikido.1","13.3.0-aikido.2","13.5.6-aikido.2","14.2.24-aikido.5","13.5.6-aikido.3","13.5.6-aikido.4","14.2.24-aikido.1","14.1.3-aikido.1","13.3.0-aikido.3","14.2.24-aikido.6","14.2.24-aikido.3","14.0.3-aikido.2"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/next","fixed_in":["13.5.11-root.io.7","13.5.11-root.io.4","13.5.11-root.io.8","13.5.11-root.io.5","13.5.11-root.io.6","13.5.11-root.io.9","16.2.5-root.io.3","13.5.11-root.io.2","13.5.11-root.io.3","15.5.21-root.io.1","16.2.11-root.io.1","16.2.11-root.io.2","15.5.21-root.io.2","14.2.5-root.io.5","14.2.5-root.io.8","14.2.35-root.io.9","14.2.30-root.io.7","14.2.26-root.io.6","14.2.26-root.io.4","14.2.30-root.io.10","13.4.19-root.io.6","13.4.19-root.io.7","14.2.10-root.io.3","14.2.13-root.io.3","14.0.4-root.io.6","14.2.3-root.io.1","14.0.4-root.io.9","14.2.25-root.io.2","14.2.24-root.io.2","14.1.0-root.io.4","14.2.18-root.io.2","13.3.0-root.io.5","14.0.4-root.io.5","14.0.4-root.io.7","14.0.4-root.io.2","14.1.0-root.io.7","14.1.0-root.io.8","14.0.4-root.io.3","14.2.13-root.io.1","14.2.3-root.io.5","14.2.0-root.io.2","14.0.3-root.io.3","14.2.5-root.io.9","14.2.5-root.io.10","14.2.2-root.io.7","14.2.10-root.io.1","14.2.29-root.io.5","14.2.31-root.io.2","14.2.18-root.io.1","14.0.0-root.io.7","14.2.10-root.io.4","14.2.13-root.io.4","14.2.10-root.io.2","14.2.18-root.io.6","14.2.21-root.io.6","14.2.16-root.io.6","14.1.4-root.io.5","14.2.25-root.io.1","13.2.4-root.io.3","14.2.0-root.io.6","14.0.4-root.io.4","14.2.31-root.io.5","14.2.0-root.io.5","14.2.2-root.io.9","14.2.30-root.io.8","13.1.6-root.io.1","13.2.4-root.io.4","14.0.3-root.io.6","14.0.0-root.io.5","14.2.5-root.io.2","14.2.5-root.io.3","15.5.15-root.io.1","16.1.6-root.io.3","14.2.3-root.io.3","13.5.4-root.io.5","14.2.5-root.io.4","13.3.0-root.io.6","14.2.30-root.io.3","14.0.3-root.io.4","14.2.13-root.io.2","14.2.5-root.io.6","14.2.21-root.io.4","14.0.0-root.io.3","14.1.4-root.io.7","14.2.21-root.io.2","14.2.16-root.io.2","14.2.16-root.io.4","13.5.4-root.io.2","14.2.30-root.io.4","13.2.4-root.io.5","13.3.0-root.io.7","14.2.26-root.io.3","14.0.3-root.io.5","14.2.30-root.io.9","15.5.10-root.io.4","14.1.4-root.io.8","13.5.4-root.io.6","14.2.16-root.io.5","14.0.0-root.io.6","14.2.21-root.io.5","14.2.5-root.io.7","14.2.3-root.io.4","14.2.2-root.io.8","13.4.19-root.io.4","14.2.15-root.io.5","14.2.30-root.io.5","14.2.3-root.io.2","15.5.10-root.io.5","14.2.28-root.io.5","14.1.4-root.io.9","13.2.4-root.io.2","16.1.6-root.io.4","16.1.7-root.io.1","13.5.6-root.io.5","14.2.15-root.io.6","16.1.6-root.io.5","13.2.4-root.io.7","15.5.15-root.io.2","14.1.3-root.io.8","14.2.32-root.io.8","14.2.29-root.io.4","14.2.33-root.io.5","13.5.6-root.io.6","14.2.26-root.io.5","15.5.10-root.io.6","14.2.26-root.io.2","14.0.4-root.io.8","14.2.28-root.io.3","14.2.31-root.io.3","14.1.4-root.io.6","14.2.18-root.io.3","13.3.0-root.io.4","14.1.0-root.io.5","16.1.7-root.io.2","14.2.16-root.io.3","14.0.0-root.io.4","14.1.0-root.io.3","14.2.18-root.io.4","13.5.4-root.io.3","14.2.31-root.io.1","14.1.4-root.io.3","14.2.0-root.io.3","13.4.19-root.io.5","14.2.31-root.io.4","15.5.15-root.io.3","16.1.6-root.io.6","14.1.4-root.io.4","13.5.4-root.io.4","15.5.15-root.io.4","16.1.6-root.io.7","16.1.7-root.io.3","13.3.0-root.io.8","13.1.6-root.io.2","14.2.21-root.io.3","13.2.4-root.io.6","14.2.0-root.io.4","14.2.30-root.io.6","14.2.33-root.io.6","14.2.28-root.io.4","14.1.0-root.io.6","15.5.10-root.io.3","13.5.6-root.io.7","16.1.6-root.io.8","14.2.18-root.io.5","14.2.35-root.io.10","14.2.35-root.io.11","16.2.5-root.io.1","16.2.5-root.io.2","14.2.33-root.io.2","14.2.32-root.io.4","14.2.15-root.io.4","14.1.3-root.io.2","14.2.15-root.io.3","14.2.32-root.io.1","14.2.33-root.io.1","14.1.3-root.io.5","14.2.29-root.io.1","14.2.32-root.io.5","14.2.33-root.io.3","14.2.2-root.io.5","14.2.2-root.io.6","14.2.30-root.io.1","14.2.30-root.io.2","14.1.3-root.io.6","14.2.35-root.io.5","14.2.33-root.io.4","14.2.35-root.io.3","14.2.32-root.io.6","14.2.35-root.io.6","14.1.3-root.io.7","14.2.32-root.io.2","14.2.32-root.io.7","14.2.28-root.io.1","14.2.35-root.io.2","14.2.28-root.io.2","14.2.35-root.io.7","14.0.0-root.io.2","14.2.29-root.io.2","14.2.21-root.io.1","14.1.3-root.io.3","14.2.16-root.io.1","14.2.32-root.io.3","14.2.29-root.io.3","14.1.3-root.io.4","14.2.35-root.io.8","14.2.35-root.io.4","14.2.35-root.io.1","13.4.19-root.io.2","13.4.19-root.io.3","14.2.24-root.io.7","14.2.24-root.io.4","16.1.6-root.io.1","16.1.6-root.io.2","14.2.2-root.io.4","14.0.0-root.io.1","13.3.0-root.io.1","13.4.19-root.io.1","14.0.3-root.io.1","13.5.6-root.io.1","13.5.4-root.io.1","13.3.0-root.io.2","13.5.6-root.io.2","14.2.24-root.io.5","13.5.6-root.io.3","13.5.6-root.io.4","14.2.24-root.io.1","14.1.3-root.io.1","13.3.0-root.io.3","14.2.24-root.io.6","14.2.24-root.io.3","14.0.3-root.io.2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.0.0"},{"fixed":"15.5.21"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.0"},{"fixed":"16.2.11"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.0.0"},{"fixed":"15.5.16"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.0"},{"fixed":"16.2.5"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.0.0"},{"fixed":"15.0.8"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.1.1-canary.0"},{"fixed":"15.1.12"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2.0-canary.0"},{"fixed":"15.2.9"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.3.0-canary.0"},{"fixed":"15.3.9"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.4.0-canary.0"},{"fixed":"15.4.11"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.5.1-canary.0"},{"fixed":"15.5.10"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.6.0-canary.0"},{"fixed":"15.6.0-canary.61"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.0-beta.0"},{"fixed":"16.0.11"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.1.0-canary.0"},{"fixed":"16.1.5"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.0.0"},{"fixed":"15.5.15"}]}]},{"source":"ghsa","ecosystem":"npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.0-beta.0"},{"fixed":"16.2.3"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"create-next-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"create-next-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.35-tuxcare.0"},{"fixed":"14.2.35-tuxcare.6"}]}],"versions":["14.2.35","14.2.35-tuxcare.4","14.2.35-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/eslint-plugin-next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/eslint-plugin-next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.35-tuxcare.0"},{"fixed":"14.2.35-tuxcare.6"}]}],"versions":["14.2.35","14.2.35-tuxcare.4","14.2.35-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/bundle-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/bundle-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.35-tuxcare.0"},{"fixed":"14.2.35-tuxcare.6"}]}],"versions":["14.2.35","14.2.35-tuxcare.4","14.2.35-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/plugin-storybook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/plugin-storybook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.35-tuxcare.0"},{"fixed":"14.2.35-tuxcare.6"}]}],"versions":["14.2.35","14.2.35-tuxcare.4","14.2.35-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/polyfill-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/polyfill-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.35-tuxcare.0"},{"fixed":"14.2.35-tuxcare.6"}]}],"versions":["14.2.35","14.2.35-tuxcare.4","14.2.35-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/polyfill-nomodule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/polyfill-nomodule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.35-tuxcare.0"},{"fixed":"14.2.35-tuxcare.6"}]}],"versions":["14.2.35","14.2.35-tuxcare.4","14.2.35-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/react-refresh-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.35-tuxcare.0"},{"fixed":"14.2.35-tuxcare.6"}]}],"versions":["14.2.35","14.2.35-tuxcare.4","14.2.35-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/react-refresh-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/third-parties","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/third-parties","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.35-tuxcare.0"},{"fixed":"14.2.35-tuxcare.6"}]}],"versions":["14.2.35","14.2.35-tuxcare.4","14.2.35-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/swc-linux-x64-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.1.2-tuxcare.0"},{"fixed":"15.1.2-tuxcare.2"}]}],"versions":["15.1.2","15.1.2-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/codemod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/codemod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.35-tuxcare.0"},{"fixed":"14.2.35-tuxcare.6"}]}],"versions":["14.2.35","14.2.35-tuxcare.4","14.2.35-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/mdx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.5.11-tuxcare.0"},{"fixed":"13.5.11-tuxcare.14"}]}],"versions":["13.5.11","13.5.11-tuxcare.13"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/mdx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.35-tuxcare.0"},{"fixed":"14.2.35-tuxcare.6"}]}],"versions":["14.2.35","14.2.35-tuxcare.4","14.2.35-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"@next/swc-linux-arm64-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.1.2-tuxcare.0"},{"fixed":"15.1.2-tuxcare.2"}]}],"versions":["15.1.2","15.1.2-tuxcare.1"]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"13.0.0"},{"fixed":"15.5.21"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.0.0"},{"fixed":"16.2.11"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"13.0.0"},{"fixed":"15.5.16"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.0.0"},{"fixed":"16.2.5"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"13.0.0"},{"fixed":"15.0.8"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.1.1-canary.0"},{"fixed":"15.1.12"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.2.0-canary.0"},{"fixed":"15.2.9"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.3.0-canary.0"},{"fixed":"15.3.9"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.4.0-canary.0"},{"fixed":"15.4.11"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.5.1-canary.0"},{"fixed":"15.5.10"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.6.0-canary.0"},{"fixed":"15.6.0-canary.61"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.0.0-beta.0"},{"fixed":"16.0.11"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.1.0-canary.0"},{"fixed":"16.1.5"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"13.0.0"},{"fixed":"15.5.15"}]}]},{"source":"osv","ecosystem":"npm","package":"next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.0.0-beta.0"},{"fixed":"16.2.3"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5.11-aikido.7"},{"fixed":"13.5.11-aikido.4"},{"fixed":"13.5.11-aikido.8"},{"fixed":"13.5.11-aikido.5"},{"fixed":"13.5.11-aikido.6"},{"fixed":"13.5.11-aikido.9"},{"fixed":"16.2.5-aikido.3"},{"fixed":"13.5.11-aikido.2"},{"fixed":"13.5.11-aikido.3"},{"fixed":"15.5.21-aikido.1"},{"fixed":"16.2.11-aikido.1"},{"fixed":"16.2.11-aikido.2"},{"fixed":"15.5.21-aikido.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.5.11-root.io.7"},{"fixed":"13.5.11-root.io.4"},{"fixed":"13.5.11-root.io.8"},{"fixed":"13.5.11-root.io.5"},{"fixed":"13.5.11-root.io.6"},{"fixed":"13.5.11-root.io.9"},{"fixed":"16.2.5-root.io.3"},{"fixed":"13.5.11-root.io.2"},{"fixed":"13.5.11-root.io.3"},{"fixed":"15.5.21-root.io.1"},{"fixed":"16.2.11-root.io.1"},{"fixed":"16.2.11-root.io.2"},{"fixed":"15.5.21-root.io.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-aikido.5"},{"fixed":"14.2.5-aikido.8"},{"fixed":"14.2.35-aikido.9"},{"fixed":"14.2.30-aikido.7"},{"fixed":"14.2.26-aikido.6"},{"fixed":"14.2.26-aikido.4"},{"fixed":"14.2.30-aikido.10"},{"fixed":"13.4.19-aikido.6"},{"fixed":"13.4.19-aikido.7"},{"fixed":"14.2.10-aikido.3"},{"fixed":"14.2.13-aikido.3"},{"fixed":"14.0.4-aikido.6"},{"fixed":"14.2.3-aikido.1"},{"fixed":"14.0.4-aikido.9"},{"fixed":"14.2.24-aikido.2"},{"fixed":"14.2.25-aikido.2"},{"fixed":"14.1.0-aikido.4"},{"fixed":"14.2.18-aikido.2"},{"fixed":"13.3.0-aikido.5"},{"fixed":"14.0.4-aikido.5"},{"fixed":"14.0.4-aikido.7"},{"fixed":"14.0.4-aikido.2"},{"fixed":"14.1.0-aikido.7"},{"fixed":"14.1.0-aikido.8"},{"fixed":"14.0.4-aikido.3"},{"fixed":"14.2.13-aikido.1"},{"fixed":"14.2.3-aikido.5"},{"fixed":"14.2.0-aikido.2"},{"fixed":"14.0.3-aikido.3"},{"fixed":"14.2.5-aikido.9"},{"fixed":"14.2.5-aikido.10"},{"fixed":"14.2.2-aikido.7"},{"fixed":"14.2.10-aikido.1"},{"fixed":"14.2.29-aikido.5"},{"fixed":"14.2.31-aikido.2"},{"fixed":"14.2.18-aikido.1"},{"fixed":"14.0.0-aikido.7"},{"fixed":"14.2.10-aikido.4"},{"fixed":"14.2.13-aikido.4"},{"fixed":"14.2.10-aikido.2"},{"fixed":"14.2.18-aikido.6"},{"fixed":"14.2.21-aikido.6"},{"fixed":"14.2.16-aikido.6"},{"fixed":"14.1.4-aikido.5"},{"fixed":"14.2.25-aikido.1"},{"fixed":"13.2.4-aikido.3"},{"fixed":"14.2.0-aikido.6"},{"fixed":"14.0.4-aikido.4"},{"fixed":"14.2.31-aikido.5"},{"fixed":"14.2.0-aikido.5"},{"fixed":"14.2.2-aikido.9"},{"fixed":"14.2.30-aikido.8"},{"fixed":"13.1.6-aikido.1"},{"fixed":"13.2.4-aikido.4"},{"fixed":"14.0.3-aikido.6"},{"fixed":"14.0.0-aikido.5"},{"fixed":"14.2.5-aikido.2"},{"fixed":"14.2.5-aikido.3"},{"fixed":"14.2.3-aikido.3"},{"fixed":"13.5.11-aikido.7"},{"fixed":"13.5.4-aikido.5"},{"fixed":"14.2.5-aikido.4"},{"fixed":"13.3.0-aikido.6"},{"fixed":"14.2.30-aikido.3"},{"fixed":"14.0.3-aikido.4"},{"fixed":"14.2.13-aikido.2"},{"fixed":"14.2.5-aikido.6"},{"fixed":"14.2.21-aikido.4"},{"fixed":"14.0.0-aikido.3"},{"fixed":"14.1.4-aikido.7"},{"fixed":"14.2.21-aikido.2"},{"fixed":"14.2.16-aikido.2"},{"fixed":"14.2.16-aikido.4"},{"fixed":"13.5.4-aikido.2"},{"fixed":"14.2.30-aikido.4"},{"fixed":"13.2.4-aikido.5"},{"fixed":"13.3.0-aikido.7"},{"fixed":"14.2.26-aikido.3"},{"fixed":"14.0.3-aikido.5"},{"fixed":"14.2.30-aikido.9"},{"fixed":"15.5.10-aikido.4"},{"fixed":"14.1.4-aikido.8"},{"fixed":"13.5.4-aikido.6"},{"fixed":"14.2.16-aikido.5"},{"fixed":"14.0.0-aikido.6"},{"fixed":"14.2.21-aikido.5"},{"fixed":"14.2.5-aikido.7"},{"fixed":"14.2.3-aikido.4"},{"fixed":"14.2.2-aikido.8"},{"fixed":"13.4.19-aikido.4"},{"fixed":"14.2.15-aikido.5"},{"fixed":"14.2.30-aikido.5"},{"fixed":"14.2.3-aikido.2"},{"fixed":"15.5.10-aikido.5"},{"fixed":"14.2.28-aikido.5"},{"fixed":"14.1.4-aikido.9"},{"fixed":"13.2.4-aikido.2"},{"fixed":"16.1.6-aikido.4"},{"fixed":"16.1.7-aikido.1"},{"fixed":"13.5.6-aikido.5"},{"fixed":"14.2.15-aikido.6"},{"fixed":"16.1.6-aikido.5"},{"fixed":"15.5.15-aikido.2"},{"fixed":"14.1.3-aikido.8"},{"fixed":"13.2.4-aikido.7"},{"fixed":"14.2.32-aikido.8"},{"fixed":"14.2.29-aikido.4"},{"fixed":"14.2.33-aikido.5"},{"fixed":"13.5.6-aikido.6"},{"fixed":"13.5.11-aikido.8"},{"fixed":"14.2.26-aikido.5"},{"fixed":"15.5.10-aikido.6"},{"fixed":"14.2.26-aikido.2"},{"fixed":"14.0.4-aikido.8"},{"fixed":"14.2.28-aikido.3"},{"fixed":"14.2.31-aikido.3"},{"fixed":"14.1.4-aikido.6"},{"fixed":"14.2.18-aikido.3"},{"fixed":"13.3.0-aikido.4"},{"fixed":"14.1.0-aikido.5"},{"fixed":"16.1.7-aikido.2"},{"fixed":"14.2.16-aikido.3"},{"fixed":"14.0.0-aikido.4"},{"fixed":"14.1.0-aikido.3"},{"fixed":"13.5.11-aikido.6"},{"fixed":"14.2.18-aikido.4"},{"fixed":"13.5.4-aikido.3"},{"fixed":"14.2.31-aikido.1"},{"fixed":"14.1.4-aikido.3"},{"fixed":"14.2.0-aikido.3"},{"fixed":"13.4.19-aikido.5"},{"fixed":"15.5.15-aikido.3"},{"fixed":"16.1.6-aikido.6"},{"fixed":"14.2.31-aikido.4"},{"fixed":"14.1.4-aikido.4"},{"fixed":"13.5.4-aikido.4"},{"fixed":"15.5.15-aikido.4"},{"fixed":"16.1.6-aikido.7"},{"fixed":"16.1.7-aikido.3"},{"fixed":"13.3.0-aikido.8"},{"fixed":"13.1.6-aikido.2"},{"fixed":"14.2.21-aikido.3"},{"fixed":"13.2.4-aikido.6"},{"fixed":"13.5.11-aikido.9"},{"fixed":"14.2.0-aikido.4"},{"fixed":"14.2.30-aikido.6"},{"fixed":"14.2.28-aikido.4"},{"fixed":"14.2.33-aikido.6"},{"fixed":"14.1.0-aikido.6"},{"fixed":"15.5.10-aikido.3"},{"fixed":"16.1.6-aikido.8"},{"fixed":"14.2.18-aikido.5"},{"fixed":"13.5.6-aikido.7"},{"fixed":"14.2.35-aikido.10"},{"fixed":"14.2.35-aikido.11"},{"fixed":"16.2.5-aikido.1"},{"fixed":"16.2.5-aikido.3"},{"fixed":"16.2.5-aikido.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-root.io.5"},{"fixed":"14.2.5-root.io.8"},{"fixed":"14.2.35-root.io.9"},{"fixed":"14.2.30-root.io.7"},{"fixed":"14.2.26-root.io.6"},{"fixed":"14.2.26-root.io.4"},{"fixed":"14.2.30-root.io.10"},{"fixed":"13.4.19-root.io.6"},{"fixed":"13.4.19-root.io.7"},{"fixed":"14.2.10-root.io.3"},{"fixed":"14.2.13-root.io.3"},{"fixed":"14.0.4-root.io.6"},{"fixed":"14.2.3-root.io.1"},{"fixed":"14.0.4-root.io.9"},{"fixed":"14.2.25-root.io.2"},{"fixed":"14.2.24-root.io.2"},{"fixed":"14.1.0-root.io.4"},{"fixed":"14.2.18-root.io.2"},{"fixed":"13.3.0-root.io.5"},{"fixed":"14.0.4-root.io.5"},{"fixed":"14.0.4-root.io.7"},{"fixed":"14.0.4-root.io.2"},{"fixed":"14.1.0-root.io.7"},{"fixed":"14.1.0-root.io.8"},{"fixed":"14.0.4-root.io.3"},{"fixed":"14.2.13-root.io.1"},{"fixed":"14.2.3-root.io.5"},{"fixed":"14.2.0-root.io.2"},{"fixed":"14.0.3-root.io.3"},{"fixed":"14.2.5-root.io.9"},{"fixed":"14.2.5-root.io.10"},{"fixed":"14.2.2-root.io.7"},{"fixed":"14.2.10-root.io.1"},{"fixed":"14.2.29-root.io.5"},{"fixed":"14.2.31-root.io.2"},{"fixed":"14.2.18-root.io.1"},{"fixed":"14.0.0-root.io.7"},{"fixed":"14.2.10-root.io.4"},{"fixed":"14.2.13-root.io.4"},{"fixed":"14.2.10-root.io.2"},{"fixed":"14.2.18-root.io.6"},{"fixed":"14.2.21-root.io.6"},{"fixed":"14.2.16-root.io.6"},{"fixed":"14.1.4-root.io.5"},{"fixed":"14.2.25-root.io.1"},{"fixed":"13.2.4-root.io.3"},{"fixed":"14.2.0-root.io.6"},{"fixed":"14.0.4-root.io.4"},{"fixed":"14.2.31-root.io.5"},{"fixed":"14.2.0-root.io.5"},{"fixed":"14.2.2-root.io.9"},{"fixed":"14.2.30-root.io.8"},{"fixed":"13.1.6-root.io.1"},{"fixed":"13.2.4-root.io.4"},{"fixed":"14.0.3-root.io.6"},{"fixed":"14.0.0-root.io.5"},{"fixed":"14.2.5-root.io.2"},{"fixed":"14.2.5-root.io.3"},{"fixed":"15.5.15-root.io.1"},{"fixed":"16.1.6-root.io.3"},{"fixed":"14.2.3-root.io.3"},{"fixed":"13.5.4-root.io.5"},{"fixed":"13.5.11-root.io.7"},{"fixed":"14.2.5-root.io.4"},{"fixed":"13.3.0-root.io.6"},{"fixed":"14.2.30-root.io.3"},{"fixed":"14.0.3-root.io.4"},{"fixed":"14.2.13-root.io.2"},{"fixed":"14.2.5-root.io.6"},{"fixed":"14.2.21-root.io.4"},{"fixed":"14.0.0-root.io.3"},{"fixed":"14.1.4-root.io.7"},{"fixed":"14.2.21-root.io.2"},{"fixed":"14.2.16-root.io.2"},{"fixed":"14.2.16-root.io.4"},{"fixed":"13.5.4-root.io.2"},{"fixed":"14.2.30-root.io.4"},{"fixed":"13.2.4-root.io.5"},{"fixed":"13.3.0-root.io.7"},{"fixed":"14.2.26-root.io.3"},{"fixed":"14.0.3-root.io.5"},{"fixed":"14.2.30-root.io.9"},{"fixed":"15.5.10-root.io.4"},{"fixed":"14.1.4-root.io.8"},{"fixed":"13.5.4-root.io.6"},{"fixed":"14.2.16-root.io.5"},{"fixed":"14.0.0-root.io.6"},{"fixed":"14.2.21-root.io.5"},{"fixed":"14.2.5-root.io.7"},{"fixed":"14.2.3-root.io.4"},{"fixed":"14.2.2-root.io.8"},{"fixed":"13.4.19-root.io.4"},{"fixed":"14.2.15-root.io.5"},{"fixed":"14.2.30-root.io.5"},{"fixed":"14.2.3-root.io.2"},{"fixed":"15.5.10-root.io.5"},{"fixed":"14.2.28-root.io.5"},{"fixed":"14.1.4-root.io.9"},{"fixed":"13.2.4-root.io.2"},{"fixed":"16.1.6-root.io.4"},{"fixed":"16.1.7-root.io.1"},{"fixed":"13.5.6-root.io.5"},{"fixed":"14.2.15-root.io.6"},{"fixed":"16.1.6-root.io.5"},{"fixed":"13.2.4-root.io.7"},{"fixed":"15.5.15-root.io.2"},{"fixed":"14.1.3-root.io.8"},{"fixed":"14.2.32-root.io.8"},{"fixed":"14.2.29-root.io.4"},{"fixed":"14.2.33-root.io.5"},{"fixed":"13.5.6-root.io.6"},{"fixed":"13.5.11-root.io.8"},{"fixed":"14.2.26-root.io.5"},{"fixed":"15.5.10-root.io.6"},{"fixed":"14.2.26-root.io.2"},{"fixed":"14.0.4-root.io.8"},{"fixed":"14.2.28-root.io.3"},{"fixed":"14.2.31-root.io.3"},{"fixed":"14.1.4-root.io.6"},{"fixed":"14.2.18-root.io.3"},{"fixed":"13.3.0-root.io.4"},{"fixed":"14.1.0-root.io.5"},{"fixed":"16.1.7-root.io.2"},{"fixed":"14.2.16-root.io.3"},{"fixed":"14.0.0-root.io.4"},{"fixed":"14.1.0-root.io.3"},{"fixed":"13.5.11-root.io.6"},{"fixed":"14.2.18-root.io.4"},{"fixed":"13.5.4-root.io.3"},{"fixed":"14.2.31-root.io.1"},{"fixed":"14.1.4-root.io.3"},{"fixed":"14.2.0-root.io.3"},{"fixed":"13.4.19-root.io.5"},{"fixed":"14.2.31-root.io.4"},{"fixed":"15.5.15-root.io.3"},{"fixed":"16.1.6-root.io.6"},{"fixed":"14.1.4-root.io.4"},{"fixed":"13.5.4-root.io.4"},{"fixed":"15.5.15-root.io.4"},{"fixed":"16.1.6-root.io.7"},{"fixed":"16.1.7-root.io.3"},{"fixed":"13.3.0-root.io.8"},{"fixed":"13.1.6-root.io.2"},{"fixed":"14.2.21-root.io.3"},{"fixed":"13.2.4-root.io.6"},{"fixed":"13.5.11-root.io.9"},{"fixed":"14.2.0-root.io.4"},{"fixed":"14.2.30-root.io.6"},{"fixed":"14.2.33-root.io.6"},{"fixed":"14.2.28-root.io.4"},{"fixed":"14.1.0-root.io.6"},{"fixed":"15.5.10-root.io.3"},{"fixed":"13.5.6-root.io.7"},{"fixed":"16.1.6-root.io.8"},{"fixed":"14.2.18-root.io.5"},{"fixed":"14.2.35-root.io.10"},{"fixed":"14.2.35-root.io.11"},{"fixed":"16.2.5-root.io.1"},{"fixed":"16.2.5-root.io.3"},{"fixed":"16.2.5-root.io.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-aikido.5"},{"fixed":"14.2.5-aikido.8"},{"fixed":"14.2.33-aikido.2"},{"fixed":"14.2.32-aikido.4"},{"fixed":"14.2.35-aikido.9"},{"fixed":"14.2.30-aikido.7"},{"fixed":"14.2.26-aikido.6"},{"fixed":"14.2.26-aikido.4"},{"fixed":"14.2.30-aikido.10"},{"fixed":"13.4.19-aikido.6"},{"fixed":"13.4.19-aikido.7"},{"fixed":"14.2.10-aikido.3"},{"fixed":"14.2.13-aikido.3"},{"fixed":"14.0.4-aikido.6"},{"fixed":"14.2.15-aikido.4"},{"fixed":"14.0.4-aikido.9"},{"fixed":"14.1.3-aikido.2"},{"fixed":"14.2.24-aikido.2"},{"fixed":"14.2.25-aikido.2"},{"fixed":"14.2.18-aikido.2"},{"fixed":"13.3.0-aikido.5"},{"fixed":"14.2.15-aikido.3"},{"fixed":"14.0.4-aikido.5"},{"fixed":"14.0.4-aikido.7"},{"fixed":"14.0.4-aikido.2"},{"fixed":"14.1.0-aikido.7"},{"fixed":"14.1.0-aikido.8"},{"fixed":"14.0.4-aikido.3"},{"fixed":"14.2.13-aikido.1"},{"fixed":"14.2.32-aikido.1"},{"fixed":"14.2.3-aikido.5"},{"fixed":"14.2.0-aikido.2"},{"fixed":"14.0.3-aikido.3"},{"fixed":"14.2.5-aikido.9"},{"fixed":"14.2.5-aikido.10"},{"fixed":"14.2.2-aikido.7"},{"fixed":"14.2.33-aikido.1"},{"fixed":"14.1.3-aikido.5"},{"fixed":"14.2.29-aikido.1"},{"fixed":"14.2.29-aikido.5"},{"fixed":"14.2.31-aikido.2"},{"fixed":"14.0.0-aikido.7"},{"fixed":"14.2.10-aikido.4"},{"fixed":"14.2.13-aikido.4"},{"fixed":"14.2.18-aikido.6"},{"fixed":"14.2.21-aikido.6"},{"fixed":"14.2.16-aikido.6"},{"fixed":"14.1.4-aikido.5"},{"fixed":"14.2.25-aikido.1"},{"fixed":"13.2.4-aikido.3"},{"fixed":"14.2.0-aikido.6"},{"fixed":"14.0.4-aikido.4"},{"fixed":"14.2.31-aikido.5"},{"fixed":"14.2.0-aikido.5"},{"fixed":"14.2.2-aikido.9"},{"fixed":"14.2.30-aikido.8"},{"fixed":"13.1.6-aikido.1"},{"fixed":"13.2.4-aikido.4"},{"fixed":"14.0.3-aikido.6"},{"fixed":"14.2.32-aikido.5"},{"fixed":"14.2.33-aikido.3"},{"fixed":"14.0.0-aikido.5"},{"fixed":"14.2.5-aikido.3"},{"fixed":"14.2.3-aikido.3"},{"fixed":"14.2.2-aikido.5"},{"fixed":"13.5.11-aikido.7"},{"fixed":"14.2.2-aikido.6"},{"fixed":"14.2.30-aikido.1"},{"fixed":"13.5.4-aikido.5"},{"fixed":"14.2.30-aikido.2"},{"fixed":"14.1.3-aikido.6"},{"fixed":"14.2.5-aikido.4"},{"fixed":"13.3.0-aikido.6"},{"fixed":"14.2.30-aikido.3"},{"fixed":"14.0.3-aikido.4"},{"fixed":"14.2.13-aikido.2"},{"fixed":"14.2.5-aikido.6"},{"fixed":"14.2.21-aikido.4"},{"fixed":"14.0.0-aikido.3"},{"fixed":"14.1.4-aikido.7"},{"fixed":"14.2.21-aikido.2"},{"fixed":"14.2.16-aikido.2"},{"fixed":"14.2.16-aikido.4"},{"fixed":"13.5.4-aikido.2"},{"fixed":"14.2.35-aikido.5"},{"fixed":"14.2.30-aikido.4"},{"fixed":"13.2.4-aikido.5"},{"fixed":"13.3.0-aikido.7"},{"fixed":"14.2.33-aikido.4"},{"fixed":"14.2.26-aikido.3"},{"fixed":"14.0.3-aikido.5"},{"fixed":"14.2.30-aikido.9"},{"fixed":"14.1.4-aikido.8"},{"fixed":"14.2.35-aikido.3"},{"fixed":"14.2.32-aikido.6"},{"fixed":"14.2.35-aikido.6"},{"fixed":"13.5.4-aikido.6"},{"fixed":"14.1.3-aikido.7"},{"fixed":"14.2.16-aikido.5"},{"fixed":"14.0.0-aikido.6"},{"fixed":"14.2.21-aikido.5"},{"fixed":"14.2.5-aikido.7"},{"fixed":"14.2.3-aikido.4"},{"fixed":"14.2.2-aikido.8"},{"fixed":"13.4.19-aikido.4"},{"fixed":"14.2.15-aikido.5"},{"fixed":"14.2.30-aikido.5"},{"fixed":"14.2.3-aikido.2"},{"fixed":"14.2.28-aikido.5"},{"fixed":"14.2.32-aikido.2"},{"fixed":"14.1.4-aikido.9"},{"fixed":"14.2.32-aikido.7"},{"fixed":"13.5.6-aikido.5"},{"fixed":"14.2.15-aikido.6"},{"fixed":"14.1.3-aikido.8"},{"fixed":"13.2.4-aikido.7"},{"fixed":"14.2.32-aikido.8"},{"fixed":"14.2.29-aikido.4"},{"fixed":"14.2.28-aikido.1"},{"fixed":"14.2.35-aikido.2"},{"fixed":"14.2.33-aikido.5"},{"fixed":"13.5.6-aikido.6"},{"fixed":"13.5.11-aikido.8"},{"fixed":"14.2.26-aikido.5"},{"fixed":"14.2.28-aikido.2"},{"fixed":"14.2.26-aikido.2"},{"fixed":"14.0.4-aikido.8"},{"fixed":"14.2.28-aikido.3"},{"fixed":"14.2.31-aikido.3"},{"fixed":"14.1.4-aikido.6"},{"fixed":"14.2.35-aikido.7"},{"fixed":"14.2.18-aikido.3"},{"fixed":"14.1.0-aikido.5"},{"fixed":"14.2.16-aikido.3"},{"fixed":"14.0.0-aikido.4"},{"fixed":"14.2.18-aikido.4"},{"fixed":"13.5.4-aikido.3"},{"fixed":"14.2.0-aikido.3"},{"fixed":"13.4.19-aikido.5"},{"fixed":"14.0.0-aikido.2"},{"fixed":"14.2.31-aikido.4"},{"fixed":"14.2.29-aikido.2"},{"fixed":"13.5.4-aikido.4"},{"fixed":"14.2.21-aikido.1"},{"fixed":"14.2.16-aikido.1"},{"fixed":"14.1.3-aikido.3"},{"fixed":"13.3.0-aikido.8"},{"fixed":"13.1.6-aikido.2"},{"fixed":"14.2.21-aikido.3"},{"fixed":"13.2.4-aikido.6"},{"fixed":"14.2.32-aikido.3"},{"fixed":"14.2.29-aikido.3"},{"fixed":"13.5.11-aikido.9"},{"fixed":"14.1.3-aikido.4"},{"fixed":"14.2.0-aikido.4"},{"fixed":"14.2.30-aikido.6"},{"fixed":"14.2.28-aikido.4"},{"fixed":"14.2.33-aikido.6"},{"fixed":"14.1.0-aikido.6"},{"fixed":"14.2.35-aikido.8"},{"fixed":"14.2.35-aikido.4"},{"fixed":"14.2.35-aikido.1"},{"fixed":"14.2.18-aikido.5"},{"fixed":"13.5.6-aikido.7"},{"fixed":"14.2.35-aikido.10"},{"fixed":"14.2.35-aikido.11"},{"fixed":"15.5.10-aikido.4"},{"fixed":"15.5.10-aikido.5"},{"fixed":"15.5.10-aikido.6"},{"fixed":"15.5.10-aikido.3"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-root.io.5"},{"fixed":"14.2.5-root.io.8"},{"fixed":"14.2.33-root.io.2"},{"fixed":"14.2.32-root.io.4"},{"fixed":"14.2.35-root.io.9"},{"fixed":"14.2.30-root.io.7"},{"fixed":"14.2.26-root.io.6"},{"fixed":"14.2.26-root.io.4"},{"fixed":"14.2.30-root.io.10"},{"fixed":"13.4.19-root.io.6"},{"fixed":"13.4.19-root.io.7"},{"fixed":"14.2.10-root.io.3"},{"fixed":"14.2.13-root.io.3"},{"fixed":"14.0.4-root.io.6"},{"fixed":"14.2.15-root.io.4"},{"fixed":"14.0.4-root.io.9"},{"fixed":"14.1.3-root.io.2"},{"fixed":"14.2.25-root.io.2"},{"fixed":"14.2.24-root.io.2"},{"fixed":"14.2.18-root.io.2"},{"fixed":"13.3.0-root.io.5"},{"fixed":"14.2.15-root.io.3"},{"fixed":"14.0.4-root.io.5"},{"fixed":"14.0.4-root.io.7"},{"fixed":"14.0.4-root.io.2"},{"fixed":"14.1.0-root.io.7"},{"fixed":"14.1.0-root.io.8"},{"fixed":"14.0.4-root.io.3"},{"fixed":"14.2.13-root.io.1"},{"fixed":"14.2.32-root.io.1"},{"fixed":"14.2.3-root.io.5"},{"fixed":"14.2.0-root.io.2"},{"fixed":"14.0.3-root.io.3"},{"fixed":"14.2.5-root.io.9"},{"fixed":"14.2.5-root.io.10"},{"fixed":"14.2.2-root.io.7"},{"fixed":"14.2.33-root.io.1"},{"fixed":"14.1.3-root.io.5"},{"fixed":"14.2.29-root.io.1"},{"fixed":"14.2.29-root.io.5"},{"fixed":"14.2.31-root.io.2"},{"fixed":"14.0.0-root.io.7"},{"fixed":"14.2.10-root.io.4"},{"fixed":"14.2.13-root.io.4"},{"fixed":"14.2.18-root.io.6"},{"fixed":"14.2.21-root.io.6"},{"fixed":"14.2.16-root.io.6"},{"fixed":"14.1.4-root.io.5"},{"fixed":"14.2.25-root.io.1"},{"fixed":"13.2.4-root.io.3"},{"fixed":"14.2.0-root.io.6"},{"fixed":"14.0.4-root.io.4"},{"fixed":"14.2.31-root.io.5"},{"fixed":"14.2.0-root.io.5"},{"fixed":"14.2.2-root.io.9"},{"fixed":"14.2.30-root.io.8"},{"fixed":"13.1.6-root.io.1"},{"fixed":"13.2.4-root.io.4"},{"fixed":"14.0.3-root.io.6"},{"fixed":"14.2.32-root.io.5"},{"fixed":"14.2.33-root.io.3"},{"fixed":"14.0.0-root.io.5"},{"fixed":"14.2.5-root.io.3"},{"fixed":"14.2.3-root.io.3"},{"fixed":"13.5.4-root.io.5"},{"fixed":"14.2.2-root.io.5"},{"fixed":"13.5.11-root.io.7"},{"fixed":"14.2.2-root.io.6"},{"fixed":"14.2.30-root.io.1"},{"fixed":"14.2.30-root.io.2"},{"fixed":"14.1.3-root.io.6"},{"fixed":"14.2.5-root.io.4"},{"fixed":"13.3.0-root.io.6"},{"fixed":"14.2.30-root.io.3"},{"fixed":"14.0.3-root.io.4"},{"fixed":"14.2.13-root.io.2"},{"fixed":"14.2.5-root.io.6"},{"fixed":"14.2.21-root.io.4"},{"fixed":"14.0.0-root.io.3"},{"fixed":"14.1.4-root.io.7"},{"fixed":"14.2.21-root.io.2"},{"fixed":"14.2.16-root.io.2"},{"fixed":"14.2.16-root.io.4"},{"fixed":"13.5.4-root.io.2"},{"fixed":"14.2.35-root.io.5"},{"fixed":"14.2.30-root.io.4"},{"fixed":"13.2.4-root.io.5"},{"fixed":"13.3.0-root.io.7"},{"fixed":"14.2.33-root.io.4"},{"fixed":"14.2.26-root.io.3"},{"fixed":"14.0.3-root.io.5"},{"fixed":"14.2.30-root.io.9"},{"fixed":"14.1.4-root.io.8"},{"fixed":"14.2.35-root.io.3"},{"fixed":"14.2.32-root.io.6"},{"fixed":"14.2.35-root.io.6"},{"fixed":"13.5.4-root.io.6"},{"fixed":"14.1.3-root.io.7"},{"fixed":"14.2.16-root.io.5"},{"fixed":"14.0.0-root.io.6"},{"fixed":"14.2.21-root.io.5"},{"fixed":"14.2.5-root.io.7"},{"fixed":"14.2.3-root.io.4"},{"fixed":"14.2.2-root.io.8"},{"fixed":"13.4.19-root.io.4"},{"fixed":"14.2.15-root.io.5"},{"fixed":"14.2.30-root.io.5"},{"fixed":"14.2.3-root.io.2"},{"fixed":"14.2.28-root.io.5"},{"fixed":"14.2.32-root.io.2"},{"fixed":"14.1.4-root.io.9"},{"fixed":"14.2.32-root.io.7"},{"fixed":"13.5.6-root.io.5"},{"fixed":"14.2.15-root.io.6"},{"fixed":"13.2.4-root.io.7"},{"fixed":"14.1.3-root.io.8"},{"fixed":"14.2.32-root.io.8"},{"fixed":"14.2.29-root.io.4"},{"fixed":"14.2.28-root.io.1"},{"fixed":"14.2.33-root.io.5"},{"fixed":"14.2.35-root.io.2"},{"fixed":"13.5.6-root.io.6"},{"fixed":"13.5.11-root.io.8"},{"fixed":"14.2.26-root.io.5"},{"fixed":"14.2.28-root.io.2"},{"fixed":"14.2.26-root.io.2"},{"fixed":"14.0.4-root.io.8"},{"fixed":"14.2.28-root.io.3"},{"fixed":"14.2.31-root.io.3"},{"fixed":"14.2.35-root.io.7"},{"fixed":"14.1.4-root.io.6"},{"fixed":"14.2.18-root.io.3"},{"fixed":"14.1.0-root.io.5"},{"fixed":"14.2.16-root.io.3"},{"fixed":"14.0.0-root.io.4"},{"fixed":"14.2.18-root.io.4"},{"fixed":"13.5.4-root.io.3"},{"fixed":"14.2.0-root.io.3"},{"fixed":"13.4.19-root.io.5"},{"fixed":"14.0.0-root.io.2"},{"fixed":"14.2.31-root.io.4"},{"fixed":"14.2.29-root.io.2"},{"fixed":"13.5.4-root.io.4"},{"fixed":"14.2.21-root.io.1"},{"fixed":"14.1.3-root.io.3"},{"fixed":"14.2.16-root.io.1"},{"fixed":"13.3.0-root.io.8"},{"fixed":"13.1.6-root.io.2"},{"fixed":"14.2.21-root.io.3"},{"fixed":"13.2.4-root.io.6"},{"fixed":"14.2.32-root.io.3"},{"fixed":"14.2.29-root.io.3"},{"fixed":"13.5.11-root.io.9"},{"fixed":"14.1.3-root.io.4"},{"fixed":"14.2.0-root.io.4"},{"fixed":"14.2.30-root.io.6"},{"fixed":"14.2.33-root.io.6"},{"fixed":"14.2.28-root.io.4"},{"fixed":"14.1.0-root.io.6"},{"fixed":"14.2.35-root.io.8"},{"fixed":"14.2.35-root.io.4"},{"fixed":"13.5.6-root.io.7"},{"fixed":"14.2.35-root.io.1"},{"fixed":"14.2.18-root.io.5"},{"fixed":"14.2.35-root.io.10"},{"fixed":"14.2.35-root.io.11"},{"fixed":"15.5.10-root.io.4"},{"fixed":"15.5.10-root.io.5"},{"fixed":"15.5.10-root.io.6"},{"fixed":"15.5.10-root.io.3"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-aikido.8"},{"fixed":"14.2.33-aikido.2"},{"fixed":"14.2.32-aikido.4"},{"fixed":"14.2.35-aikido.9"},{"fixed":"14.2.30-aikido.7"},{"fixed":"14.2.26-aikido.6"},{"fixed":"14.2.26-aikido.4"},{"fixed":"14.2.30-aikido.10"},{"fixed":"13.4.19-aikido.6"},{"fixed":"13.4.19-aikido.7"},{"fixed":"14.2.10-aikido.3"},{"fixed":"14.2.13-aikido.3"},{"fixed":"14.0.4-aikido.6"},{"fixed":"14.0.4-aikido.9"},{"fixed":"13.4.19-aikido.2"},{"fixed":"14.1.3-aikido.2"},{"fixed":"14.2.24-aikido.2"},{"fixed":"14.2.25-aikido.2"},{"fixed":"14.1.0-aikido.4"},{"fixed":"13.3.0-aikido.5"},{"fixed":"13.4.19-aikido.3"},{"fixed":"14.0.4-aikido.5"},{"fixed":"14.0.4-aikido.7"},{"fixed":"14.1.0-aikido.7"},{"fixed":"14.1.0-aikido.8"},{"fixed":"14.2.32-aikido.1"},{"fixed":"14.2.3-aikido.5"},{"fixed":"14.0.3-aikido.3"},{"fixed":"14.2.5-aikido.9"},{"fixed":"14.2.5-aikido.10"},{"fixed":"14.2.2-aikido.7"},{"fixed":"14.2.33-aikido.1"},{"fixed":"14.1.3-aikido.5"},{"fixed":"14.2.29-aikido.1"},{"fixed":"14.2.29-aikido.5"},{"fixed":"14.2.31-aikido.2"},{"fixed":"14.0.0-aikido.7"},{"fixed":"14.2.10-aikido.4"},{"fixed":"14.2.13-aikido.4"},{"fixed":"14.2.18-aikido.6"},{"fixed":"14.2.21-aikido.6"},{"fixed":"14.2.16-aikido.6"},{"fixed":"14.2.25-aikido.1"},{"fixed":"14.2.0-aikido.6"},{"fixed":"14.2.31-aikido.5"},{"fixed":"14.2.2-aikido.9"},{"fixed":"14.2.30-aikido.8"},{"fixed":"13.1.6-aikido.1"},{"fixed":"14.2.24-aikido.7"},{"fixed":"14.2.24-aikido.4"},{"fixed":"14.0.3-aikido.6"},{"fixed":"14.2.32-aikido.5"},{"fixed":"14.2.33-aikido.3"},{"fixed":"14.0.0-aikido.5"},{"fixed":"14.2.3-aikido.3"},{"fixed":"14.2.2-aikido.4"},{"fixed":"14.2.2-aikido.5"},{"fixed":"13.5.11-aikido.7"},{"fixed":"14.2.2-aikido.6"},{"fixed":"13.5.4-aikido.5"},{"fixed":"14.0.0-aikido.1"},{"fixed":"14.1.3-aikido.6"},{"fixed":"13.3.0-aikido.1"},{"fixed":"13.3.0-aikido.6"},{"fixed":"13.4.19-aikido.1"},{"fixed":"14.0.3-aikido.4"},{"fixed":"13.5.11-aikido.4"},{"fixed":"14.0.3-aikido.1"},{"fixed":"14.2.21-aikido.4"},{"fixed":"13.5.6-aikido.1"},{"fixed":"14.0.0-aikido.3"},{"fixed":"14.1.4-aikido.7"},{"fixed":"13.5.4-aikido.1"},{"fixed":"14.2.21-aikido.2"},{"fixed":"13.3.0-aikido.2"},{"fixed":"14.2.16-aikido.2"},{"fixed":"14.2.16-aikido.4"},{"fixed":"13.5.4-aikido.2"},{"fixed":"14.2.35-aikido.5"},{"fixed":"13.5.6-aikido.2"},{"fixed":"14.2.30-aikido.4"},{"fixed":"13.3.0-aikido.7"},{"fixed":"14.2.33-aikido.4"},{"fixed":"14.2.26-aikido.3"},{"fixed":"14.0.3-aikido.5"},{"fixed":"14.2.30-aikido.9"},{"fixed":"15.5.10-aikido.4"},{"fixed":"14.1.4-aikido.8"},{"fixed":"14.2.35-aikido.3"},{"fixed":"14.2.32-aikido.6"},{"fixed":"14.2.35-aikido.6"},{"fixed":"13.5.4-aikido.6"},{"fixed":"14.2.24-aikido.5"},{"fixed":"14.1.3-aikido.7"},{"fixed":"14.2.16-aikido.5"},{"fixed":"14.0.0-aikido.6"},{"fixed":"14.2.21-aikido.5"},{"fixed":"14.2.3-aikido.4"},{"fixed":"14.2.2-aikido.8"},{"fixed":"13.4.19-aikido.4"},{"fixed":"14.2.15-aikido.5"},{"fixed":"14.2.30-aikido.5"},{"fixed":"14.2.3-aikido.2"},{"fixed":"13.5.6-aikido.3"},{"fixed":"13.5.6-aikido.4"},{"fixed":"15.5.10-aikido.5"},{"fixed":"14.2.28-aikido.5"},{"fixed":"14.2.24-aikido.1"},{"fixed":"14.2.32-aikido.2"},{"fixed":"14.1.4-aikido.9"},{"fixed":"16.1.6-aikido.4"},{"fixed":"14.1.3-aikido.1"},{"fixed":"16.1.7-aikido.1"},{"fixed":"13.3.0-aikido.3"},{"fixed":"14.2.32-aikido.7"},{"fixed":"13.5.6-aikido.5"},{"fixed":"14.2.15-aikido.6"},{"fixed":"16.1.6-aikido.5"},{"fixed":"14.1.3-aikido.8"},{"fixed":"13.2.4-aikido.7"},{"fixed":"14.2.32-aikido.8"},{"fixed":"14.2.29-aikido.4"},{"fixed":"14.2.35-aikido.2"},{"fixed":"14.2.33-aikido.5"},{"fixed":"13.5.6-aikido.6"},{"fixed":"13.5.11-aikido.8"},{"fixed":"14.2.26-aikido.5"},{"fixed":"15.5.10-aikido.6"},{"fixed":"14.0.4-aikido.8"},{"fixed":"14.2.28-aikido.3"},{"fixed":"14.2.31-aikido.3"},{"fixed":"14.2.24-aikido.6"},{"fixed":"14.1.4-aikido.6"},{"fixed":"14.2.35-aikido.7"},{"fixed":"14.2.18-aikido.3"},{"fixed":"13.3.0-aikido.4"},{"fixed":"14.1.0-aikido.5"},{"fixed":"16.1.7-aikido.2"},{"fixed":"14.2.16-aikido.3"},{"fixed":"14.0.0-aikido.4"},{"fixed":"13.5.11-aikido.5"},{"fixed":"14.1.0-aikido.3"},{"fixed":"13.5.11-aikido.6"},{"fixed":"14.2.18-aikido.4"},{"fixed":"13.5.4-aikido.3"},{"fixed":"13.4.19-aikido.5"},{"fixed":"14.0.0-aikido.2"},{"fixed":"16.1.6-aikido.6"},{"fixed":"14.2.31-aikido.4"},{"fixed":"14.2.29-aikido.2"},{"fixed":"13.5.4-aikido.4"},{"fixed":"14.2.21-aikido.1"},{"fixed":"16.1.6-aikido.7"},{"fixed":"16.1.7-aikido.3"},{"fixed":"14.1.3-aikido.3"},{"fixed":"13.3.0-aikido.8"},{"fixed":"14.2.24-aikido.3"},{"fixed":"13.1.6-aikido.2"},{"fixed":"14.2.21-aikido.3"},{"fixed":"14.2.32-aikido.3"},{"fixed":"14.2.29-aikido.3"},{"fixed":"13.5.11-aikido.9"},{"fixed":"14.0.3-aikido.2"},{"fixed":"14.1.3-aikido.4"},{"fixed":"14.2.30-aikido.6"},{"fixed":"14.2.28-aikido.4"},{"fixed":"14.2.33-aikido.6"},{"fixed":"14.1.0-aikido.6"},{"fixed":"14.2.35-aikido.8"},{"fixed":"14.2.35-aikido.4"},{"fixed":"15.5.10-aikido.3"},{"fixed":"16.1.6-aikido.8"},{"fixed":"14.2.18-aikido.5"},{"fixed":"13.5.6-aikido.7"},{"fixed":"14.2.35-aikido.10"},{"fixed":"14.2.35-aikido.11"},{"fixed":"15.5.15-aikido.2"},{"fixed":"15.5.15-aikido.3"},{"fixed":"15.5.15-aikido.4"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/next","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-root.io.8"},{"fixed":"14.2.33-root.io.2"},{"fixed":"14.2.32-root.io.4"},{"fixed":"14.2.35-root.io.9"},{"fixed":"14.2.30-root.io.7"},{"fixed":"14.2.26-root.io.6"},{"fixed":"14.2.26-root.io.4"},{"fixed":"14.2.30-root.io.10"},{"fixed":"13.4.19-root.io.6"},{"fixed":"13.4.19-root.io.7"},{"fixed":"14.2.10-root.io.3"},{"fixed":"14.2.13-root.io.3"},{"fixed":"14.0.4-root.io.6"},{"fixed":"14.0.4-root.io.9"},{"fixed":"13.4.19-root.io.2"},{"fixed":"14.1.3-root.io.2"},{"fixed":"14.2.25-root.io.2"},{"fixed":"14.2.24-root.io.2"},{"fixed":"14.1.0-root.io.4"},{"fixed":"13.3.0-root.io.5"},{"fixed":"14.0.4-root.io.5"},{"fixed":"13.4.19-root.io.3"},{"fixed":"14.0.4-root.io.7"},{"fixed":"14.1.0-root.io.7"},{"fixed":"14.1.0-root.io.8"},{"fixed":"14.2.32-root.io.1"},{"fixed":"14.2.3-root.io.5"},{"fixed":"14.0.3-root.io.3"},{"fixed":"14.2.5-root.io.9"},{"fixed":"14.2.5-root.io.10"},{"fixed":"14.2.2-root.io.7"},{"fixed":"14.2.33-root.io.1"},{"fixed":"14.1.3-root.io.5"},{"fixed":"14.2.29-root.io.1"},{"fixed":"14.2.29-root.io.5"},{"fixed":"14.2.31-root.io.2"},{"fixed":"14.0.0-root.io.7"},{"fixed":"14.2.10-root.io.4"},{"fixed":"14.2.13-root.io.4"},{"fixed":"14.2.18-root.io.6"},{"fixed":"14.2.21-root.io.6"},{"fixed":"14.2.16-root.io.6"},{"fixed":"14.2.25-root.io.1"},{"fixed":"14.2.0-root.io.6"},{"fixed":"14.2.31-root.io.5"},{"fixed":"14.2.2-root.io.9"},{"fixed":"14.2.30-root.io.8"},{"fixed":"13.1.6-root.io.1"},{"fixed":"14.2.24-root.io.7"},{"fixed":"14.2.24-root.io.4"},{"fixed":"14.0.3-root.io.6"},{"fixed":"14.2.32-root.io.5"},{"fixed":"14.2.33-root.io.3"},{"fixed":"14.0.0-root.io.5"},{"fixed":"16.1.6-root.io.1"},{"fixed":"16.1.6-root.io.2"},{"fixed":"16.1.6-root.io.3"},{"fixed":"14.2.3-root.io.3"},{"fixed":"14.2.2-root.io.4"},{"fixed":"13.5.4-root.io.5"},{"fixed":"14.2.2-root.io.5"},{"fixed":"13.5.11-root.io.7"},{"fixed":"14.2.2-root.io.6"},{"fixed":"14.0.0-root.io.1"},{"fixed":"14.1.3-root.io.6"},{"fixed":"13.3.0-root.io.1"},{"fixed":"13.3.0-root.io.6"},{"fixed":"13.4.19-root.io.1"},{"fixed":"14.0.3-root.io.4"},{"fixed":"13.5.11-root.io.4"},{"fixed":"14.0.3-root.io.1"},{"fixed":"14.2.21-root.io.4"},{"fixed":"13.5.6-root.io.1"},{"fixed":"14.0.0-root.io.3"},{"fixed":"14.1.4-root.io.7"},{"fixed":"13.5.4-root.io.1"},{"fixed":"14.2.21-root.io.2"},{"fixed":"13.3.0-root.io.2"},{"fixed":"14.2.16-root.io.2"},{"fixed":"14.2.16-root.io.4"},{"fixed":"13.5.4-root.io.2"},{"fixed":"14.2.35-root.io.5"},{"fixed":"13.5.6-root.io.2"},{"fixed":"14.2.30-root.io.4"},{"fixed":"13.3.0-root.io.7"},{"fixed":"14.2.33-root.io.4"},{"fixed":"14.2.26-root.io.3"},{"fixed":"14.0.3-root.io.5"},{"fixed":"14.2.30-root.io.9"},{"fixed":"15.5.10-root.io.4"},{"fixed":"14.1.4-root.io.8"},{"fixed":"14.2.35-root.io.3"},{"fixed":"14.2.32-root.io.6"},{"fixed":"14.2.35-root.io.6"},{"fixed":"13.5.4-root.io.6"},{"fixed":"14.2.24-root.io.5"},{"fixed":"14.1.3-root.io.7"},{"fixed":"14.2.16-root.io.5"},{"fixed":"14.0.0-root.io.6"},{"fixed":"14.2.21-root.io.5"},{"fixed":"14.2.3-root.io.4"},{"fixed":"14.2.2-root.io.8"},{"fixed":"13.4.19-root.io.4"},{"fixed":"14.2.15-root.io.5"},{"fixed":"14.2.30-root.io.5"},{"fixed":"14.2.3-root.io.2"},{"fixed":"13.5.6-root.io.3"},{"fixed":"13.5.6-root.io.4"},{"fixed":"15.5.10-root.io.5"},{"fixed":"14.2.28-root.io.5"},{"fixed":"14.2.24-root.io.1"},{"fixed":"14.2.32-root.io.2"},{"fixed":"14.1.4-root.io.9"},{"fixed":"16.1.6-root.io.4"},{"fixed":"14.1.3-root.io.1"},{"fixed":"16.1.7-root.io.1"},{"fixed":"13.3.0-root.io.3"},{"fixed":"14.2.32-root.io.7"},{"fixed":"13.5.6-root.io.5"},{"fixed":"14.2.15-root.io.6"},{"fixed":"16.1.6-root.io.5"},{"fixed":"13.2.4-root.io.7"},{"fixed":"14.1.3-root.io.8"},{"fixed":"14.2.32-root.io.8"},{"fixed":"14.2.29-root.io.4"},{"fixed":"14.2.33-root.io.5"},{"fixed":"14.2.35-root.io.2"},{"fixed":"13.5.6-root.io.6"},{"fixed":"13.5.11-root.io.8"},{"fixed":"14.2.26-root.io.5"},{"fixed":"15.5.10-root.io.6"},{"fixed":"14.0.4-root.io.8"},{"fixed":"14.2.28-root.io.3"},{"fixed":"14.2.24-root.io.6"},{"fixed":"14.2.31-root.io.3"},{"fixed":"14.2.35-root.io.7"},{"fixed":"14.1.4-root.io.6"},{"fixed":"14.2.18-root.io.3"},{"fixed":"13.3.0-root.io.4"},{"fixed":"14.1.0-root.io.5"},{"fixed":"16.1.7-root.io.2"},{"fixed":"14.2.16-root.io.3"},{"fixed":"14.0.0-root.io.4"},{"fixed":"13.5.11-root.io.5"},{"fixed":"14.1.0-root.io.3"},{"fixed":"13.5.11-root.io.6"},{"fixed":"14.2.18-root.io.4"},{"fixed":"13.5.4-root.io.3"},{"fixed":"13.4.19-root.io.5"},{"fixed":"14.0.0-root.io.2"},{"fixed":"14.2.31-root.io.4"},{"fixed":"16.1.6-root.io.6"},{"fixed":"14.2.29-root.io.2"},{"fixed":"13.5.4-root.io.4"},{"fixed":"14.2.21-root.io.1"},{"fixed":"14.1.3-root.io.3"},{"fixed":"16.1.6-root.io.7"},{"fixed":"16.1.7-root.io.3"},{"fixed":"13.3.0-root.io.8"},{"fixed":"14.2.24-root.io.3"},{"fixed":"13.1.6-root.io.2"},{"fixed":"14.2.21-root.io.3"},{"fixed":"14.2.32-root.io.3"},{"fixed":"14.2.29-root.io.3"},{"fixed":"13.5.11-root.io.9"},{"fixed":"14.0.3-root.io.2"},{"fixed":"14.1.3-root.io.4"},{"fixed":"14.2.30-root.io.6"},{"fixed":"14.2.33-root.io.6"},{"fixed":"14.2.28-root.io.4"},{"fixed":"14.1.0-root.io.6"},{"fixed":"14.2.35-root.io.8"},{"fixed":"14.2.35-root.io.4"},{"fixed":"15.5.10-root.io.3"},{"fixed":"13.5.6-root.io.7"},{"fixed":"16.1.6-root.io.8"},{"fixed":"14.2.18-root.io.5"},{"fixed":"14.2.35-root.io.10"},{"fixed":"14.2.35-root.io.11"},{"fixed":"15.5.15-root.io.1"},{"fixed":"15.5.15-root.io.2"},{"fixed":"15.5.15-root.io.3"},{"fixed":"15.5.15-root.io.4"}]}]}],"products":[{"vendor":"vercel","product":"next.js"}],"references":[{"url":"https://github.com/vercel/next.js/security/advisories/GHSA-4633-3j49-mh5q","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","web"]},{"url":"https://github.com/vercel/next.js/pull/96008","tags":["x_refsource_MISC","Issue Tracking","Patch","fix","web"]},{"url":"https://github.com/vercel/next.js/commit/025bf4a5f7b47fb7758c4ebf1c931a61c451c082","tags":["x_refsource_MISC","Patch","fix","web"]},{"url":"https://github.com/vercel/next.js/releases/tag/v15.5.21","tags":["x_refsource_MISC","Product","Release Notes","web"]},{"url":"https://github.com/vercel/next.js/releases/tag/v16.2.11","tags":["x_refsource_MISC","Product","Release Notes","web"]},{"url":"https://github.com/advisories/GHSA-4633-3j49-mh5q"},{"url":"https://github.com/facebook/react/security/advisories/GHSA-rv78-f8rc-xrxh","tags":["web"]},{"url":"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj","tags":["web"]},{"url":"https://github.com/vitejs/vite-plugin-react/security/advisories/GHSA-w94c-4vhp-22gx","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23870","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8h8q-6873-q5fj"},{"url":"https://github.com/facebook/react/security/advisories/GHSA-83fc-fqcc-2hmg","tags":["web"]},{"url":"https://github.com/vercel/next.js/security/advisories/GHSA-h25m-26qc-wcjf","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23864","tags":["advisory"]},{"url":"https://vercel.com/changelog/summary-of-cve-2026-23864","tags":["web"]},{"url":"https://github.com/advisories/GHSA-h25m-26qc-wcjf"},{"url":"https://github.com/vercel/next.js/security/advisories/GHSA-q4gf-8mx6-v5v3","tags":["web"]},{"url":"https://vercel.com/changelog/summary-of-cve-2026-23869","tags":["web"]},{"url":"https://github.com/advisories/GHSA-q4gf-8mx6-v5v3"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64647.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64647","tags":["advisory"]},{"url":"https://github.com/vercel/next.js","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2026-64647","title":"Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies","description":"Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may return a cached response body from a different request to the same URL but different body. Confidential data in the POST's response body would then leak to unauthorized requests. Though the request itself will not be deduped. This is only an issue when receiving request bodies with a content type charset other than UTF-8. For example, the UTF-16 byte sequences for 삃삃 and 섄섄 in the request body would share the same cache. This issue has been fixed in versions 15.5.21 and 16.2.11.","status":"published","published":"2026-07-27T19:11:28.477Z","modified":"2026-07-27T19:27:13.932Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"}],"cwes":["CWE-116"],"updated_at":"2026-11-02T14:19:57.818032Z"}],"euvd":[{"id":"EUVD-2026-49404","description":"Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may return a cached response body from a different request to the same URL but different body. Confidential data in the POST's response body would then leak to unauthorized requests. Though the request itself will not be deduped. This is only an issue when receiving request bodies with a content type charset other than UTF-8. For example, the UTF-16 byte sequences for 삃삃 and 섄섄 in the request body would share the same cache. This issue has been fixed in versions 15.5.21 and 16.2.11.","status":"published","published":"2026-07-27T19:11:28Z","modified":"2026-07-27T19:27:13Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T18:02:33.886037Z"}],"ghsa":[{"id":"GHSA-4633-3j49-mh5q","title":"Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences","description":"## Impact\n\nA server-side `fetch` with a request body may return a cached **response** body from a different request to the same URL but different body. Confidential data in the `POST`'s **response** body would then leak to unauthorized requests. Though the request itself will not be deduped.\n\nThis is only an issue when receiving request bodies with a content type charset other than UTF-8. For example, the UTF-16 byte sequences for `삃삃` and `섄섄` in the request body would share the same cache.\n\n## Workarounds\n\nIf you cannot upgrade, consider only making fetch requests with UTF-8 bodies (default in Next.js). Applications using Pages Router are not vulnerable.","status":"published","published":"2026-07-22T23:06:12Z","modified":"2026-07-22T23:06:14Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-116"],"updated_at":"2026-11-02T14:40:51.375752Z"},{"id":"GHSA-8h8q-6873-q5fj","title":"Next.js Vulnerable to Denial of Service with Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23870](https://github.com/facebook/react/security/advisories/GHSA-rv78-f8rc-xrxh). \n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.","status":"published","published":"2026-05-11T14:50:27Z","modified":"2026-05-11T14:50:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:40:05.816188Z"},{"id":"GHSA-h25m-26qc-wcjf","title":"Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.0.x, 19.1.x, and 19.2.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23864](https://github.com/facebook/react/security/advisories/GHSA-83fc-fqcc-2hmg).\n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage, out-of-memory exceptions, or server crashes. This can result in denial of service in unpatched environments.","status":"published","published":"2026-01-28T15:38:01Z","modified":"2026-01-28T15:38:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400","CWE-502"],"updated_at":"2026-11-02T14:39:20.563096Z"},{"id":"GHSA-q4gf-8mx6-v5v3","title":"Next.js has a Denial of Service with Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23869](https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg). You can read more about this advisory our [this changelog](https://vercel.com/changelog/summary-of-cve-2026-23869).\n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.","status":"published","published":"2026-04-10T15:35:47Z","modified":"2026-04-10T15:35:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:39:52.102227Z"}],"nvd":[{"id":"CVE-2026-64647","description":"Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may return a cached response body from a different request to the same URL but different body. Confidential data in the POST's response body would then leak to unauthorized requests. Though the request itself will not be deduped. This is only an issue when receiving request bodies with a content type charset other than UTF-8. For example, the UTF-16 byte sequences for 삃삃 and 섄섄 in the request body would share the same cache. This issue has been fixed in versions 15.5.21 and 16.2.11.","status":"published","published":"2026-07-27T19:17:21.627Z","modified":"2026-10-24T13:10:00.147Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-116"],"updated_at":"2026-11-02T14:12:33.249634Z"}],"osv":[{"id":"CVE-2026-64647","title":"Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies","description":"Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may return a cached response body from a different request to the same URL but different body. Confidential data in the POST's response body would then leak to unauthorized requests. Though the request itself will not be deduped. This is only an issue when receiving request bodies with a content type charset other than UTF-8. For example, the UTF-16 byte sequences for 삃삃 and 섄섄 in the request body would share the same cache. This issue has been fixed in versions 15.5.21 and 16.2.11.","status":"published","published":"2026-07-27T19:11:28.477Z","modified":"2026-10-28T03:01:14.930303408Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-116"],"updated_at":"2026-11-02T15:45:14.096824Z"},{"id":"GHSA-4633-3j49-mh5q","title":"Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences","description":"## Impact\n\nA server-side `fetch` with a request body may return a cached **response** body from a different request to the same URL but different body. Confidential data in the `POST`'s **response** body would then leak to unauthorized requests. Though the request itself will not be deduped.\n\nThis is only an issue when receiving request bodies with a content type charset other than UTF-8. For example, the UTF-16 byte sequences for `삃삃` and `섄섄` in the request body would share the same cache.\n\n## Workarounds\n\nIf you cannot upgrade, consider only making fetch requests with UTF-8 bodies (default in Next.js). Applications using Pages Router are not vulnerable.","status":"published","published":"2026-07-22T23:06:12Z","modified":"2026-09-10T03:50:51.390157243Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-116"],"updated_at":"2026-11-02T15:46:36.434231Z"},{"id":"GHSA-8h8q-6873-q5fj","title":"Next.js Vulnerable to Denial of Service with Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23870](https://github.com/facebook/react/security/advisories/GHSA-rv78-f8rc-xrxh). \n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.","status":"published","published":"2026-05-11T14:50:27Z","modified":"2026-09-10T03:51:04.979274056Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:46:42.437513Z"},{"id":"GHSA-h25m-26qc-wcjf","title":"Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.0.x, 19.1.x, and 19.2.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23864](https://github.com/facebook/react/security/advisories/GHSA-83fc-fqcc-2hmg).\n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage, out-of-memory exceptions, or server crashes. This can result in denial of service in unpatched environments.","status":"published","published":"2026-01-28T15:38:01Z","modified":"2026-09-10T03:50:33.105717591Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400","CWE-502"],"updated_at":"2026-11-02T15:46:48.546324Z"},{"id":"GHSA-q4gf-8mx6-v5v3","title":"Next.js has a Denial of Service with Server Components","description":"A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23869](https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg). You can read more about this advisory our [this changelog](https://vercel.com/changelog/summary-of-cve-2026-23869).\n\nA specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.","status":"published","published":"2026-04-10T15:35:47Z","modified":"2026-09-10T03:51:02.717818177Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:46:54.055966Z"},{"id":"CLSA-2026-1786360051","title":"TuxCare security update for 13 packages (13 CVEs)","description":"TuxCare rebuilt 13 packages to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"withdrawn","published":"2026-08-10T11:07:31Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1786538556","title":"TuxCare security update for 13 packages (3 CVEs)","description":"TuxCare rebuilt 13 packages to address 3 CVEs. Fixed in 14.2.35-tuxcare.6.","status":"withdrawn","published":"2026-08-12T12:42:36Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1791807020","title":"TuxCare security update for 9 packages (28 CVEs)","description":"TuxCare rebuilt 9 packages to address 28 CVEs. Fixed in 15.1.2-tuxcare.2.","status":"withdrawn","published":"2026-10-12T12:10:20Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1792195727","title":"TuxCare security update for create-next-app (13 CVEs)","description":"TuxCare rebuilt create-next-app to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-17T00:08:44Z","modified":"2026-10-17T01:30:11.397473767Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"CLSA-2026-1792195748","title":"TuxCare security update for create-next-app (3 CVEs)","description":"TuxCare rebuilt create-next-app to address 3 CVEs. Fixed in 14.2.35-tuxcare.6.","status":"published","published":"2026-10-17T00:09:05Z","modified":"2026-10-17T01:30:10.609588377Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"CLSA-2026-1792196726","title":"TuxCare security update for @next/eslint-plugin-next (13 CVEs)","description":"TuxCare rebuilt @next/eslint-plugin-next to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-17T00:25:23Z","modified":"2026-10-17T01:30:11.610605589Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"CLSA-2026-1792196877","title":"TuxCare security update for @next/eslint-plugin-next (3 CVEs)","description":"TuxCare rebuilt @next/eslint-plugin-next to address 3 CVEs. Fixed in 14.2.35-tuxcare.6.","status":"published","published":"2026-10-17T00:27:56Z","modified":"2026-10-17T01:30:13.007480268Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"CLSA-2026-1792206290","title":"TuxCare security update for @next/bundle-analyzer (13 CVEs)","description":"TuxCare rebuilt @next/bundle-analyzer to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-17T03:04:46Z","modified":"2026-10-17T07:00:39.779147959Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"CLSA-2026-1792206303","title":"TuxCare security update for @next/bundle-analyzer (3 CVEs)","description":"TuxCare rebuilt @next/bundle-analyzer to address 3 CVEs. Fixed in 14.2.35-tuxcare.6.","status":"published","published":"2026-10-17T03:05:03Z","modified":"2026-10-17T07:00:40.485390998Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"CLSA-2026-1792272230","title":"TuxCare security update for @next/plugin-storybook (13 CVEs)","description":"TuxCare rebuilt @next/plugin-storybook to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-17T21:23:46Z","modified":"2026-10-18T01:30:33.988692137Z","updated_at":"2026-11-02T15:43:52.288832Z"},{"id":"CLSA-2026-1792272243","title":"TuxCare security update for @next/plugin-storybook (3 CVEs)","description":"TuxCare rebuilt @next/plugin-storybook to address 3 CVEs. Fixed in 14.2.35-tuxcare.6.","status":"published","published":"2026-10-17T21:24:03Z","modified":"2026-10-18T01:30:33.784079989Z","updated_at":"2026-11-02T15:43:52.288832Z"},{"id":"CLSA-2026-1792293000","title":"TuxCare security update for @next/polyfill-module (13 CVEs)","description":"TuxCare rebuilt @next/polyfill-module to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-18T03:09:58Z","modified":"2026-10-18T07:15:13.505132195Z","updated_at":"2026-11-02T15:43:52.288832Z"},{"id":"CLSA-2026-1792293014","title":"TuxCare security update for @next/polyfill-module (3 CVEs)","description":"TuxCare rebuilt @next/polyfill-module to address 3 CVEs. Fixed in 14.2.35-tuxcare.6.","status":"published","published":"2026-10-18T03:10:14Z","modified":"2026-10-18T07:15:11.900987165Z","updated_at":"2026-11-02T15:43:52.288832Z"},{"id":"CLSA-2026-1792304720","title":"TuxCare security update for @next/polyfill-nomodule (13 CVEs)","description":"TuxCare rebuilt @next/polyfill-nomodule to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-18T06:25:16Z","modified":"2026-10-18T07:15:15.101132848Z","updated_at":"2026-11-02T15:43:52.545698Z"},{"id":"CLSA-2026-1792304721","title":"TuxCare security update for @next/polyfill-nomodule (3 CVEs)","description":"TuxCare rebuilt @next/polyfill-nomodule to address 3 CVEs. Fixed in 14.2.35-tuxcare.6.","status":"published","published":"2026-10-18T06:25:17Z","modified":"2026-10-18T07:15:16.007638916Z","updated_at":"2026-11-02T15:43:52.545698Z"},{"id":"CLSA-2026-1792326296","title":"TuxCare security update for @next/react-refresh-utils (3 CVEs)","description":"TuxCare rebuilt @next/react-refresh-utils to address 3 CVEs. Fixed in 14.2.35-tuxcare.6.","status":"published","published":"2026-10-18T12:24:52Z","modified":"2026-10-18T13:15:57.152727069Z","updated_at":"2026-11-02T15:43:52.545698Z"},{"id":"CLSA-2026-1792326302","title":"TuxCare security update for @next/react-refresh-utils (13 CVEs)","description":"TuxCare rebuilt @next/react-refresh-utils to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-18T12:25:02Z","modified":"2026-10-18T13:15:57.145529191Z","updated_at":"2026-11-02T15:43:52.545698Z"},{"id":"CLSA-2026-1792338232","title":"TuxCare security update for @next/third-parties (13 CVEs)","description":"TuxCare rebuilt @next/third-parties to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-18T15:43:50Z","modified":"2026-10-18T19:15:40.050661554Z","updated_at":"2026-11-02T15:43:52.545698Z"},{"id":"CLSA-2026-1792338236","title":"TuxCare security update for @next/third-parties (3 CVEs)","description":"TuxCare rebuilt @next/third-parties to address 3 CVEs. Fixed in 14.2.35-tuxcare.6.","status":"published","published":"2026-10-18T15:43:53Z","modified":"2026-10-18T19:15:41.356774694Z","updated_at":"2026-11-02T15:43:52.545698Z"},{"id":"CLSA-2026-1792346490","title":"TuxCare security update for @next/swc-linux-x64-gnu (3 CVEs)","description":"TuxCare rebuilt @next/swc-linux-x64-gnu to address 3 CVEs. Fixed in 15.1.2-tuxcare.2.","status":"published","published":"2026-10-18T18:01:28Z","modified":"2026-11-10T19:58:19.182433202Z","updated_at":"2026-11-10T20:07:30.871041Z"},{"id":"CLSA-2026-1792358596","title":"TuxCare security update for @next/codemod (13 CVEs)","description":"TuxCare rebuilt @next/codemod to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-18T21:23:16Z","modified":"2026-10-19T07:46:00.926214692Z","updated_at":"2026-11-02T15:43:53.071325Z"},{"id":"CLSA-2026-1792358597","title":"TuxCare security update for @next/codemod (3 CVEs)","description":"TuxCare rebuilt @next/codemod to address 3 CVEs. Fixed in 14.2.35-tuxcare.6.","status":"published","published":"2026-10-18T21:23:16Z","modified":"2026-10-19T07:46:01.582175743Z","updated_at":"2026-11-02T15:43:53.071325Z"},{"id":"CLSA-2026-1792364002","title":"TuxCare security update for @next/mdx (13 CVEs)","description":"TuxCare rebuilt @next/mdx to address 13 CVEs. Fixed in 13.5.11-tuxcare.14.","status":"published","published":"2026-10-18T22:53:22Z","modified":"2026-10-19T07:46:07.293005453Z","updated_at":"2026-11-02T15:43:53.071325Z"},{"id":"CLSA-2026-1792364003","title":"TuxCare security update for @next/mdx (3 CVEs)","description":"TuxCare rebuilt @next/mdx to address 3 CVEs. Fixed in 14.2.35-tuxcare.6.","status":"published","published":"2026-10-18T22:53:22Z","modified":"2026-10-19T07:46:06.593773332Z","updated_at":"2026-11-02T15:43:53.071325Z"},{"id":"CLSA-2026-1792367406","title":"TuxCare security update for @next/swc-linux-arm64-gnu (3 CVEs)","description":"TuxCare rebuilt @next/swc-linux-arm64-gnu to address 3 CVEs. Fixed in 15.1.2-tuxcare.2.","status":"published","published":"2026-10-18T23:50:05Z","modified":"2026-11-10T19:58:26.668957645Z","updated_at":"2026-11-10T20:07:20.748062Z"},{"id":"ROOT-APP-NPM-CVE-2026-64647","title":"CVE-2026-64647 in next - Patched by Root","description":"Root has patched CVE-2026-64647 in the next package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-10-27T08:33:06Z","modified":"2026-10-27T09:15:04.273617999Z","updated_at":"2026-11-02T15:53:27.649662Z"},{"id":"ROOT-APP-NPM-GHSA-8h8q-6873-q5fj","title":"GHSA-8h8q-6873-q5fj in next - Patched by Root","description":"Root has patched GHSA-8h8q-6873-q5fj in the next package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-11-02T10:42:42Z","modified":"2026-11-02T11:15:05.820234548Z","updated_at":"2026-11-02T15:53:27.940619Z"},{"id":"ROOT-APP-NPM-GHSA-h25m-26qc-wcjf","title":"GHSA-h25m-26qc-wcjf in next - Patched by Root","description":"Root has patched GHSA-h25m-26qc-wcjf in the next package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-11-02T10:42:42Z","modified":"2026-11-02T11:15:06.672348464Z","updated_at":"2026-11-02T15:53:27.940619Z"},{"id":"ROOT-APP-NPM-GHSA-q4gf-8mx6-v5v3","title":"GHSA-q4gf-8mx6-v5v3 in next - Patched by Root","description":"Root has patched GHSA-q4gf-8mx6-v5v3 in the next package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-11-02T10:42:42Z","modified":"2026-11-02T11:15:05.55154554Z","updated_at":"2026-11-02T15:53:27.940619Z"}]}}