Zeit vulnerabilities

Products

• Serve 5
• Next.js 4

Newest

• vercel next.js Directory Traversal in Next.js versions below 9.3.2 CVE-2020-5284 Fix available EPSS 44.8% 4.4 MediumMarch 30, 2020
• pytorch serve Path Traversal in serve CVE-2019-5415 Fix available 7.5 HighMarch 17, 2019
• pytorch serve Directory Traversal in serve CVE-2019-5417 Fix available 7.5 HighMarch 17, 2019
• zeit next.js Next.js has cross site scripting (XSS) vulnerability via the 404 or 500 /_error page CVE-2018-18282 Fix available 6.1 MediumOctober 12, 2018
• hackerone serve node module, zeit serve +1 more vercel/serve allows access to restricted files if filename is URL encoded. CVE-2018-3718 Fix available 5.3 MediumJune 7, 2018
• hackerone serve node module, zeit serve +1 more Directory Traversal in serve CVE-2018-3712 Fix available 6.5 MediumJune 7, 2018
• zeit serve Information Exposure on Case Insensitive File Systems in serve CVE-2018-3809 Fix available 5.3 MediumJune 1, 2018
• zeit next.js Directory traversal vulnerability in Next.js CVE-2018-6184 Fix available 7.5 HighJanuary 24, 2018
• zeit next.js Next.js Directory Traversal Vulnerability CVE-2017-16877 Fix available EPSS 14.1% 7.5 HighNovember 17, 2017