next-rspack vulnerabilities (TuxCare)
22 vulnerabilities.
next-rspackTuxCareNext.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass6.3 Mediumnext-rspackTuxCareNext.js: Server-Side Request Forgery in Image Optimization8.3 Highnext-rspackTuxCareNext.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint2.3 Lownext-rspackTuxCareNext.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes7.5 Highnext-rspackTuxCareNext.js: Middleware / Proxy bypass through dynamic route parameter injection8.1 Highnext-rspackTuxCareNext.js: Cross-site scripting in App Router applications using CSP nonces4.7 Mediumnext-rspackTuxCareNext.js: Cross-site scripting in beforeInteractive scripts with untrusted input6.1 Mediumnext-rspackTuxCareNext.js: Denial of Service via connection exhaustion in applications using Cache Components7.5 Highnext-rspackTuxCareNext.js: Server-side request forgery in applications using WebSocket upgrades8.6 Highnext-rspackTuxCareNext.js: Denial of Service in the Image Optimization API5.9 Mediumnext-rspackTuxCareNext.js: Cache poisoning in React Server Component responses5.4 Mediumnext-rspackTuxCareNext.js: Unbounded postponed resume buffering can lead to DoS6.9 Mediumnext-rspackTuxCareNext.js: null origin can bypass Server Actions CSRF checks5.3 Mediumnext-rspackTuxCareNext.js: null origin can bypass dev HMR websocket CSRF checks2.3 Lownext-rspackTuxCareNext.js has Unbounded Memory Consumption via PPR Resume Endpoint5.9 Mediumnext-rspackTuxCareNext.js Vulnerable to Denial of Service with Server Components5.9 Mediumnext-rspackTuxCareNext.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications6.3 Mediumnext-rspackTuxCareNext.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service6.3 Mediumnext-rspackTuxCareNext.js: Unauthenticated Remote Code Execution on windows-hosted servers9.0 Criticalnext-rspackTuxCareNext.js: Cache poisoning via collisions in React Server Component cache-busting3.7 Lownext-rspackTuxCareNext.js is vulnerable to RCE in React flight protocol10.0 Criticalnext-rspackTuxCareReact Server Components are Vulnerable to RCE10.0 Critical