Next.js

Next.js gives you the best developer experience with all the features you need for production: hybrid static amp server rendering TypeScript support smart bundling route pre-fetching and more.

Official Site:

https://nextjs.org/

Severity Summary:

Critical: 1 High: 7 Medium: 6

Reference

Title

Severity

CVE-2025-29927

Authorization Bypass in Next.js Middleware

Critical

CVE-2018-6184

Next.js Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability

High

CVE-2017-16877

Next.js Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability

High

CVE-2022-23646

Next.js User Interface (UI) Misrepresentation of Critical Information Vulnerability

High

CVE-2021-43803

Next.js Vulnerability

High

CVE-2022-21721

Next.js Vulnerability

High

CVE-2023-46298

Next.js Vulnerability

High

CVE-2024-47831

Next.js Uncontrolled Recursion Vulnerability

High

CVE-2020-5284

Next.js Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability

Medium

CVE-2018-18282

Next.js Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2022-36046

Next.js Improper Check for Unusual or Exceptional Conditions Vulnerability

Medium

CVE-2021-39178

Next.js Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2021-37699

Next.js URL Redirection to Untrusted Site (Open Redirect) Vulnerability

Medium

CVE-2020-15242

Next.js URL Redirection to Untrusted Site (Open Redirect) Vulnerability

Medium