Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-94484 (GCVE-0-2026-94484)

Vulnerability from cvelistv5 – Published: 2026-10-02 15:26 – Updated: 2026-10-02 15:26

Title

Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service

Summary

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response cache key that is insufficiently scoped to the source route. A single unauthenticated crafted request can poison that cache, causing cross-user content substitution or persistent denial of service until the poisoned entry is revalidated or replaced. This issue is fixed in versions 15.5.27 and 16.3.8.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

CWE

CWE-524 - Use of Cache Containing Sensitive Information

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/commit/52c94abd…	x_refsource_MISC
https://github.com/vercel/next.js/commit/719e4c67…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v15.5.27	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.3.8	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 15.0.0, < 15.5.27 Affected: >= 16.0.0, < 16.3.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 15.0.0, \u003c 15.5.27"
            },
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.3.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response cache key that is insufficiently scoped to the source route. A single unauthenticated crafted request can poison that cache, causing cross-user content substitution or persistent denial of service until the poisoned entry is revalidated or replaced. This issue is fixed in versions 15.5.27 and 16.3.8."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-524",
              "description": "CWE-524: Use of Cache Containing Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T15:26:48.417Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/52c94abdd2ea5f416f5e8353ea8a2edd3fe311b8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/52c94abdd2ea5f416f5e8353ea8a2edd3fe311b8"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v15.5.27",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v15.5.27"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.3.8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.3.8"
        }
      ],
      "source": {
        "advisory": "GHSA-mcj8-r9mp-w47p",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-94484",
    "datePublished": "2026-10-02T15:26:48.417Z",
    "dateReserved": "2026-09-21T17:25:42.292Z",
    "dateUpdated": "2026-10-02T15:26:48.417Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-94485 (GCVE-0-2026-94485)

Vulnerability from cvelistv5 – Published: 2026-10-02 15:23 – Updated: 2026-10-02 16:05

Title

Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass

Summary

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the `next dev` development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read the project's disk location, source code snippets from error reports, route inventory, and development logs. Production deployments do not serve this endpoint. This issue is fixed in version 16.3.8.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-02 16:04 UTC

CWE

CWE-346 - Origin Validation Error

Assigner

GitHub_M mitre root

References

3 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/commit/2d9f50a4…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.3.8	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 16.0.0, < 16.3.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-94485",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-02T16:04:38.452430Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-02T16:05:57.266Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.3.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the `next dev` development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read the project\u0027s disk location, source code snippets from error reports, route inventory, and development logs. Production deployments do not serve this endpoint. This issue is fixed in version 16.3.8."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-346",
              "description": "CWE-346: Origin Validation Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T15:23:29.239Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/2d9f50a409312696145b82b3157aadb6b1fef476",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/2d9f50a409312696145b82b3157aadb6b1fef476"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.3.8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.3.8"
        }
      ],
      "source": {
        "advisory": "GHSA-f87g-xv8r-7p7x",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-94485",
    "datePublished": "2026-10-02T15:23:29.239Z",
    "dateReserved": "2026-09-21T17:25:42.292Z",
    "dateUpdated": "2026-10-02T16:05:57.266Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-94483 (GCVE-0-2026-94483)

Vulnerability from cvelistv5 – Published: 2026-10-02 15:18 – Updated: 2026-10-02 15:18

Title

Next.js: Server-Side Request Forgery in Image Optimization

Summary

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized image fetch to reach private IP addresses after the URL passes the allow-list check. Applications without images.remotePatterns are not affected. Administrators unable to upgrade should audit allow-listed hosts and avoid entries whose DNS records are not trusted. This issue is fixed in version 16.3.8.

Severity

8.3 (High)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

GitHub_M mitre root

References

3 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/commit/e002ad68…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.3.8	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 16.0.0, < 16.3.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.3.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized image fetch to reach private IP addresses after the URL passes the allow-list check. Applications without images.remotePatterns are not affected. Administrators unable to upgrade should audit allow-listed hosts and avoid entries whose DNS records are not trusted. This issue is fixed in version 16.3.8."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T15:18:38.684Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-cjq9-62q9-8jv4",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-cjq9-62q9-8jv4"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/e002ad68bd676bb0ed0c87bb22e3590304763e0b",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/e002ad68bd676bb0ed0c87bb22e3590304763e0b"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.3.8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.3.8"
        }
      ],
      "source": {
        "advisory": "GHSA-cjq9-62q9-8jv4",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Server-Side Request Forgery in Image Optimization"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-94483",
    "datePublished": "2026-10-02T15:18:38.684Z",
    "dateReserved": "2026-09-21T17:25:42.292Z",
    "dateUpdated": "2026-10-02T15:18:38.684Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-94543 (GCVE-0-2026-94543)

Vulnerability from cvelistv5 – Published: 2026-10-02 15:16 – Updated: 2026-10-02 15:16

Title

Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

Summary

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache entry without sufficiently binding it to the source route. A request can replace one page's cache entry with content from a different route, causing the affected page to serve incorrect content to every visitor until revalidation. Applications deployed on Vercel are not affected. This issue is fixed in versions 15.5.27 and 16.3.8.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

CWE

CWE-524 - Use of Cache Containing Sensitive Information

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/commit/52c94abd…	x_refsource_MISC
https://github.com/vercel/next.js/commit/719e4c67…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v15.5.27	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.3.8	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 15.0.0, < 15.5.27 Affected: >= 16.0.0, < 16.3.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 15.0.0, \u003c 15.5.27"
            },
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.3.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache entry without sufficiently binding it to the source route. A request can replace one page\u0027s cache entry with content from a different route, causing the affected page to serve incorrect content to every visitor until revalidation. Applications deployed on Vercel are not affected. This issue is fixed in versions 15.5.27 and 16.3.8."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-524",
              "description": "CWE-524: Use of Cache Containing Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T15:16:49.658Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/52c94abdd2ea5f416f5e8353ea8a2edd3fe311b8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/52c94abdd2ea5f416f5e8353ea8a2edd3fe311b8"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v15.5.27",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v15.5.27"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.3.8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.3.8"
        }
      ],
      "source": {
        "advisory": "GHSA-4jqv-mc3x-m676",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-94543",
    "datePublished": "2026-10-02T15:16:49.658Z",
    "dateReserved": "2026-09-21T19:21:33.371Z",
    "dateUpdated": "2026-10-02T15:16:49.658Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-94544 (GCVE-0-2026-94544)

Vulnerability from cvelistv5 – Published: 2026-10-02 15:14 – Updated: 2026-10-02 15:14

Title

Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages

Summary

Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills for the same key are shared without separating Draft Mode requests from regular requests. An overlapping regular request can receive unauthenticated unpublished content from an editor's Draft Mode fill, while an overlapping Draft Mode request can receive published content from a regular fill. When the regular request prerenders a page, the draft-dependent content can persist in the generated page and be served to later visitors until revalidation. Sites are affected when Cache Components or experimental.useCache is enabled and cached functions return draft-dependent content. This issue is fixed in version 16.3.8.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CWE

CWE-524 - Use of Cache Containing Sensitive Information

Assigner

GitHub_M mitre root

References

3 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/commit/bd9214f9…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.3.8	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 16.3.0, < 16.3.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 16.3.0, \u003c 16.3.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills for the same key are shared without separating Draft Mode requests from regular requests. An overlapping regular request can receive unauthenticated unpublished content from an editor\u0027s Draft Mode fill, while an overlapping Draft Mode request can receive published content from a regular fill. When the regular request prerenders a page, the draft-dependent content can persist in the generated page and be served to later visitors until revalidation. Sites are affected when Cache Components or experimental.useCache is enabled and cached functions return draft-dependent content. This issue is fixed in version 16.3.8."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-524",
              "description": "CWE-524: Use of Cache Containing Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T15:14:43.506Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-3w37-wq28-93x7",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-3w37-wq28-93x7"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/bd9214f9a32854a011bf5fe58e481dffe1bbf598",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/bd9214f9a32854a011bf5fe58e481dffe1bbf598"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.3.8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.3.8"
        }
      ],
      "source": {
        "advisory": "GHSA-3w37-wq28-93x7",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-94544",
    "datePublished": "2026-10-02T15:14:43.506Z",
    "dateReserved": "2026-09-21T19:21:33.371Z",
    "dateUpdated": "2026-10-02T15:14:43.506Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-94486 (GCVE-0-2026-94486)

Vulnerability from cvelistv5 – Published: 2026-10-02 15:12 – Updated: 2026-10-02 16:20

Title

Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint

Summary

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read the project's disk location, source code snippets from error reports, route inventory, and development logs. Production deployments do not serve this endpoint. This issue is fixed in version 16.3.8.

Severity

2.3 (Low)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-02 16:20 UTC

CWE

CWE-346 - Origin Validation Error

Assigner

GitHub_M mitre root

References

3 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/commit/2d9f50a4…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.3.8	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 16.0.0, < 16.3.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-94486",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-02T16:20:02.218983Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-02T16:20:19.256Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.3.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read the project\u0027s disk location, source code snippets from error reports, route inventory, and development logs. Production deployments do not serve this endpoint. This issue is fixed in version 16.3.8."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-346",
              "description": "CWE-346: Origin Validation Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T15:12:31.134Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-39w2-rjm5-chcv",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-39w2-rjm5-chcv"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/2d9f50a409312696145b82b3157aadb6b1fef476",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/2d9f50a409312696145b82b3157aadb6b1fef476"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.3.8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.3.8"
        }
      ],
      "source": {
        "advisory": "GHSA-39w2-rjm5-chcv",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Information disclosure in the Next.js development server\u0027s Model Context Protocol endpoint"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-94486",
    "datePublished": "2026-10-02T15:12:31.134Z",
    "dateReserved": "2026-09-21T17:25:42.292Z",
    "dateUpdated": "2026-10-02T16:20:19.256Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-103004 (GCVE-0-2026-103004)

Vulnerability from cvelistv5 – Published: 2026-10-01 14:50 – Updated: 2026-10-01 16:09

Title

next.js cache leak on warm `use cache` handlers accessing root param

Summary

Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with different root params. With Cache Components enabled (cacheComponents: true), a 'use cache' function that calls another 'use cache' function that reads a root param can be keyed incorrectly when the inner call is served from an existing entry: the enclosing function's cache key then omits that root param. The enclosing entry is written once and reused for all root param values, so a response for one root param value can serve content produced for a different value — whether the page is prerendered at build time or at runtime, or rendered dynamically. Shared cache headers let downstream caches redistribute the content further. What values are leaked cannot be attacker controlled. Which value's content is served depends only on which invocation wrote the entry first. This has been patched in 16.3.8.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-01 16:09 UTC

CWE

CWE-524 - Use of Cache Containing Sensitive Information

Assigner

GitHub_M mitre root

References

2 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/releases/tag/v16.3.8	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: < 16.3.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-103004",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-01T16:09:43.511822Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-01T16:09:53.178Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 16.3.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with different root params. With Cache Components enabled (cacheComponents: true), a \u0027use cache\u0027 function that calls another \u0027use cache\u0027 function that reads a root param can be keyed incorrectly when the inner call is served from an existing entry: the enclosing function\u0027s cache key then omits that root param. The enclosing entry is written once and reused for all root param values, so a response for one root param value can serve content produced for a different value \u2014 whether the page is prerendered at build time or at runtime, or rendered dynamically. Shared cache headers let downstream caches redistribute the content further.\n\nWhat values are leaked cannot be attacker controlled. Which value\u0027s content is served depends only on which invocation wrote the entry first.\n\nThis has been patched in 16.3.8."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-524",
              "description": "CWE-524: Use of Cache Containing Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-01T14:50:27.033Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-h694-7cp9-m8p3",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-h694-7cp9-m8p3"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.3.8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.3.8"
        }
      ],
      "source": {
        "advisory": "GHSA-h694-7cp9-m8p3",
        "discovery": "UNKNOWN"
      },
      "title": "next.js cache leak on warm `use cache` handlers accessing root param"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-103004",
    "datePublished": "2026-10-01T14:50:27.033Z",
    "dateReserved": "2026-09-29T20:46:08.335Z",
    "dateUpdated": "2026-10-01T16:09:53.178Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-94545 (GCVE-0-2026-94545)

Vulnerability from cvelistv5 – Published: 2026-09-30 14:53 – Updated: 2026-09-30 15:48

Title

Satori-generated SVG has improper escaping

Summary

Satori is a library to convert HTML and CSS to SVG. Starting in version 0.0.27 and prior to version 0.33.5, Satori does not properly escape certain values before including them in generated SVG output. This can allow crafted values to be interpreted as SVG markup. The impact depends on how the generated SVG is consumed. Version 0.33.5 contains a patch. No complete workaround exists besides upgrading. Applications that cannot immediately upgrade should not render attacker-controlled content with Satori.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-30 15:41 UTC

CWE

CWE-116 - Improper Encoding or Escaping of Output

Assigner

GitHub_M mitre root

References

6 references

URL	Tags
https://github.com/vercel/satori/security/advisor…	x_refsource_CONFIRM
https://github.com/vercel/next.js/security/adviso…	x_refsource_MISC
https://github.com/vercel/satori/pull/814	x_refsource_MISC
https://github.com/vercel/next.js/commit/868fad38…	x_refsource_MISC
https://github.com/vercel/satori/commit/26a52affc…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.3.6	x_refsource_MISC

Impacted products

2 products

Vendor	Product	Version
vercel	satori	Affected: >= 0.0.27, < 0.33.5
vercel	next	Affected: >= 16.2.0, < 16.3.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-94545",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T15:41:03.767825Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T15:48:41.962Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "satori",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 0.0.27, \u003c 0.33.5"
            }
          ]
        },
        {
          "product": "next",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 16.2.0, \u003c 16.3.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Satori is a library to convert HTML and CSS to SVG. Starting in version 0.0.27 and prior to version 0.33.5, Satori does not properly escape certain values before including them in generated SVG output. This can allow crafted values to be interpreted as SVG markup. The impact depends on how the generated SVG is consumed. Version 0.33.5 contains a patch. No complete workaround exists besides upgrading. Applications that cannot immediately upgrade should not render attacker-controlled content with Satori."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-116",
              "description": "CWE-116: Improper Encoding or Escaping of Output",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T14:53:34.961Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/satori/security/advisories/GHSA-wx4j-mvgx-mqwp",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/satori/security/advisories/GHSA-wx4j-mvgx-mqwp"
        },
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j"
        },
        {
          "name": "https://github.com/vercel/satori/pull/814",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/satori/pull/814"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/868fad38690d72088868f299fa2bef339b26838e",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/868fad38690d72088868f299fa2bef339b26838e"
        },
        {
          "name": "https://github.com/vercel/satori/commit/26a52affc031216fee5882b6e965c8dbc7ac1782",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/satori/commit/26a52affc031216fee5882b6e965c8dbc7ac1782"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.3.6",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.3.6"
        }
      ],
      "source": {
        "advisory": "GHSA-wx4j-mvgx-mqwp",
        "discovery": "UNKNOWN"
      },
      "title": "Satori-generated SVG has improper escaping"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-94545",
    "datePublished": "2026-09-30T14:53:34.961Z",
    "dateReserved": "2026-09-21T19:21:33.371Z",
    "dateUpdated": "2026-09-30T15:48:41.962Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-75604 (GCVE-0-2026-75604)

Vulnerability from cvelistv5 – Published: 2026-09-01 21:23 – Updated: 2026-09-04 19:54

Title

Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

Summary

Next.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 and 16.3.3, Next.js applications using Pages Router or App Router without Cache Components on Windows-hosted servers do not consistently escape backslashes in route segments before constructing incremental-cache paths. In packages/next/src/shared/lib/router/utils/escape-path-delimiters.ts and packages/next/src/server/lib/incremental-cache/file-system-cache.ts, a remote request can supply encoded Windows path separators that traverse outside the intended cache root and expose private build data, including the server-reference-manifest encryption key. Disclosure of that key can enable remote code execution in the affected application. This issue is fixed in versions 15.5.24 and 16.3.3.

Severity

9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-03 03:56 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/commit/968b9fcb…	x_refsource_MISC
https://github.com/vercel/next.js/commit/b0f3460a…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v15.5.24	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.3.3	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 13.4.0, < 15.5.24 Affected: >= 16.0.0, < 16.3.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-75604",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-03T03:56:24.826443Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-04T19:54:40.089Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 13.4.0, \u003c 15.5.24"
            },
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.3.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 and 16.3.3, Next.js applications using Pages Router or App Router without Cache Components on Windows-hosted servers do not consistently escape backslashes in route segments before constructing incremental-cache paths. In packages/next/src/shared/lib/router/utils/escape-path-delimiters.ts and packages/next/src/server/lib/incremental-cache/file-system-cache.ts, a remote request can supply encoded Windows path separators that traverse outside the intended cache root and expose private build data, including the server-reference-manifest encryption key. Disclosure of that key can enable remote code execution in the affected application. This issue is fixed in versions 15.5.24 and 16.3.3."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-01T21:23:30.859Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-p293-qw3h-jr36",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-p293-qw3h-jr36"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/968b9fcb26bdeb8e0a861a9df05361474666d51b",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/968b9fcb26bdeb8e0a861a9df05361474666d51b"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/b0f3460a92b955d3ca41fccff9a525a2b910fbf3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/b0f3460a92b955d3ca41fccff9a525a2b910fbf3"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v15.5.24",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v15.5.24"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.3.3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.3.3"
        }
      ],
      "source": {
        "advisory": "GHSA-p293-qw3h-jr36",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Unauthenticated Remote Code Execution on windows-hosted servers"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-75604",
    "datePublished": "2026-09-01T21:23:30.859Z",
    "dateReserved": "2026-08-17T23:49:03.450Z",
    "dateUpdated": "2026-09-04T19:54:40.089Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-64649 (GCVE-0-2026-64649)

Vulnerability from cvelistv5 – Published: 2026-07-27 19:27 – Updated: 2026-07-28 14:12

Title

Next.js: Server-Side Request Forgery in Server Actions on Custom Servers

Summary

Next.js is a React framework for building full-stack web applications. In versions 14.1.1 through 15.5.20 and 16.0.0 through 16.2.10, when a Server Action forwards or redirects a request, an attacker can cause the server to send that outbound request to a malicious host (Server-Side Request Forgery). This requires the attacker's request to control Host-associated headers. In some configurations, it's also possible to obtain internal values that weaken middleware/proxy authorization. Applications that use Server Actions are affected when the incoming host header is not fixed to a trusted value. This typically occurs on custom servers, or on deployments not behind a proxy that pins the host. Managed hosting pins the host upstream and is not affected; next start and standalone output do the same from version 14.2 onward. This issue has been fixed in versions 15.5.21 and 16.2.11.

Severity

8.3 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-28 14:11 UTC

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/commit/b5120632…	x_refsource_MISC
https://github.com/vercel/next.js/commit/e3e5666c…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v15.5.21	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.2.11	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 14.1.1, < 15.5.21 Affected: >= 16.0.0 < 16.2.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-64649",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-28T14:11:48.555168Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-28T14:12:06.654Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 14.1.1, \u003c 15.5.21"
            },
            {
              "status": "affected",
              "version": "\u003e= 16.0.0 \u003c 16.2.11"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. In versions 14.1.1 through 15.5.20 and 16.0.0 through 16.2.10, when a Server Action forwards or redirects a request, an attacker can cause the server to send that outbound request to a malicious host (Server-Side Request Forgery). This requires the attacker\u0027s request to control Host-associated headers. In some configurations, it\u0027s also possible to obtain internal values that weaken middleware/proxy authorization. Applications that use Server Actions are affected when the incoming host header is not fixed to a trusted value. This typically occurs on custom servers, or on deployments not behind a proxy that pins the host. Managed hosting pins the host upstream and is not affected; next start and standalone output do the same from version 14.2 onward. This issue has been fixed in versions 15.5.21 and 16.2.11."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-27T19:27:58.865Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-89xv-2m56-2m9x",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-89xv-2m56-2m9x"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/b51206321854193208c0805ba42acc49287f942b",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/b51206321854193208c0805ba42acc49287f942b"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/e3e5666ccead3a15162793d697af5e48b7cc0498",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/e3e5666ccead3a15162793d697af5e48b7cc0498"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v15.5.21",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v15.5.21"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.2.11",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.2.11"
        }
      ],
      "source": {
        "advisory": "GHSA-89xv-2m56-2m9x",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Server-Side Request Forgery in Server Actions on Custom Servers"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-64649",
    "datePublished": "2026-07-27T19:27:58.865Z",
    "dateReserved": "2026-07-20T17:11:30.895Z",
    "dateUpdated": "2026-07-28T14:12:06.654Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-64648 (GCVE-0-2026-64648)

Vulnerability from cvelistv5 – Published: 2026-07-27 19:20 – Updated: 2026-07-28 14:14

Title

Next.js: Response Body Cache Confusion for Requests Containing Bodies

Summary

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may return a cached response body from a different request to the same URL but different body. Confidential data in the POST's response body would then leak to unauthorized requests. Though the request itself will not be deduped. This only applies to fetch calls with a request that has a different init than the one passed to fetch. A safe request would be: fetch(new Request(init), init). An unsafe request would be: fetch(new Request(init), aDifferentInit). This issue has been fixed in versions 15.5.21 and 16.2.11.

Severity

6 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-28 14:14 UTC

CWE

CWE-524 - Use of Cache Containing Sensitive Information

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/commit/062f6670…	x_refsource_MISC
https://github.com/vercel/next.js/commit/73b94872…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v15.5.21	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.2.11	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 13.0.0, < 15.5.21 Affected: >= 16.0.0, < 16.2.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-64648",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-28T14:14:02.950100Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-28T14:14:16.051Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 15.5.21"
            },
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.2.11"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a  server-side fetch with a request body may return a cached response body from a different request to the same URL but different body. Confidential data in the POST\u0027s response body would then leak to unauthorized requests. Though the request itself will not be deduped. This only applies to fetch calls with a request that has a different init than the one passed to fetch. A safe request would be: fetch(new Request(init), init). An unsafe request would be: fetch(new Request(init), aDifferentInit). This issue has been fixed in versions 15.5.21 and 16.2.11."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-524",
              "description": "CWE-524: Use of Cache Containing Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-27T19:20:42.623Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-68g3-v927-f742",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-68g3-v927-f742"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/062f66700b52a5d6bba2c0605d55577ab7ad262c",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/062f66700b52a5d6bba2c0605d55577ab7ad262c"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/73b94872bc343d09494b50394d8c08eb9fc8e56a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/73b94872bc343d09494b50394d8c08eb9fc8e56a"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v15.5.21",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v15.5.21"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.2.11",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.2.11"
        }
      ],
      "source": {
        "advisory": "GHSA-68g3-v927-f742",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Response Body Cache Confusion for Requests Containing Bodies"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-64648",
    "datePublished": "2026-07-27T19:20:42.623Z",
    "dateReserved": "2026-07-20T17:11:30.895Z",
    "dateUpdated": "2026-07-28T14:14:16.051Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-64647 (GCVE-0-2026-64647)

Vulnerability from cvelistv5 – Published: 2026-07-27 19:11 – Updated: 2026-07-27 19:27

Title

Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies

Summary

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may return a cached response body from a different request to the same URL but different body. Confidential data in the POST's response body would then leak to unauthorized requests. Though the request itself will not be deduped. This is only an issue when receiving request bodies with a content type charset other than UTF-8. For example, the UTF-16 byte sequences for 삃삃 and 섄섄 in the request body would share the same cache. This issue has been fixed in versions 15.5.21 and 16.2.11.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-27 19:27 UTC

CWE

CWE-116 - Improper Encoding or Escaping of Output

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/pull/96008	x_refsource_MISC
https://github.com/vercel/next.js/commit/025bf4a5…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v15.5.21	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.2.11	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 13.0.0, < 15.5.21 Affected: >= 16.0.0, < 16.2.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-64647",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-27T19:27:08.369919Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-27T19:27:13.932Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 15.5.21"
            },
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.2.11"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may return a cached response body from a different request to the same URL but different body. Confidential data in the POST\u0027s response body would then leak to unauthorized requests. Though the request itself will not be deduped. This is only an issue when receiving request bodies with a content type charset other than UTF-8. For example, the UTF-16 byte sequences for \uc083\uc083 and \uc104\uc104 in the request body would share the same cache. This issue has been fixed in versions 15.5.21 and 16.2.11."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-116",
              "description": "CWE-116: Improper Encoding or Escaping of Output",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-27T19:11:28.477Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-4633-3j49-mh5q",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-4633-3j49-mh5q"
        },
        {
          "name": "https://github.com/vercel/next.js/pull/96008",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/pull/96008"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/025bf4a5f7b47fb7758c4ebf1c931a61c451c082",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/025bf4a5f7b47fb7758c4ebf1c931a61c451c082"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v15.5.21",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v15.5.21"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.2.11",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.2.11"
        }
      ],
      "source": {
        "advisory": "GHSA-4633-3j49-mh5q",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-64647",
    "datePublished": "2026-07-27T19:11:28.477Z",
    "dateReserved": "2026-07-20T17:11:30.895Z",
    "dateUpdated": "2026-07-27T19:27:13.932Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-64646 (GCVE-0-2026-64646)

Vulnerability from cvelistv5 – Published: 2026-07-27 18:54 – Updated: 2026-07-27 20:22

Title

Next.js: Unbounded Server Action payload in Edge runtime

Summary

Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the Edge runtime. This issue has been fixed in versions 15.5.21 and 16.2.11.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-27 20:22 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/commit/57c31f72…	x_refsource_MISC
https://github.com/vercel/next.js/commit/9a4651e7…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v15.5.21	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.2.11	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 13.0.0 < 15.5.21 Affected: >= 16.0.0, < 16.2.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-64646",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-27T20:22:07.853148Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-27T20:22:18.086Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 13.0.0 \u003c 15.5.21"
            },
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.2.11"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the Edge runtime. This issue has been fixed in versions 15.5.21 and 16.2.11."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-27T18:54:59.466Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-4c39-4ccg-62r3",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-4c39-4ccg-62r3"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/57c31f724d746e86a9e8b92aa8be538a922446a4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/57c31f724d746e86a9e8b92aa8be538a922446a4"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/9a4651e754f70b12e397694ffc41f44c3ba8cc17",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/9a4651e754f70b12e397694ffc41f44c3ba8cc17"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v15.5.21",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v15.5.21"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.2.11",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.2.11"
        }
      ],
      "source": {
        "advisory": "GHSA-4c39-4ccg-62r3",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Unbounded Server Action payload in Edge runtime"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-64646",
    "datePublished": "2026-07-27T18:54:59.466Z",
    "dateReserved": "2026-07-20T17:11:30.895Z",
    "dateUpdated": "2026-07-27T20:22:18.086Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-64644 (GCVE-0-2026-64644)

Vulnerability from cvelistv5 – Published: 2026-07-27 17:54 – Updated: 2026-07-27 18:35

Title

Next.js: Denial of Service in the Image Optimization API using SVGs

Summary

Next.js is a React framework for building full-stack web applications. In versions 15.5.0 through 15.5.20 and 16.0.0 through 16.2.10, when self-hosting Next.js with the default image loader, the Image Optimization API can optimize remotely hosted images if configured (not enabled by default). If those images contain malicious content, they can cause CPU exhaustion in /_next/image endpoints.Only config.images.remotePatterns is affected, and just the patterns in that array, whereas config.images.unoptimized: true, config.images.loader: 'custom', and Vercel are not impacted. This issue has been fixed in versions 15.5.21 and 16.2.11.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-27 18:35 UTC

CWE

CWE-407 - Inefficient Algorithmic Complexity

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/pull/96006	x_refsource_MISC
https://github.com/vercel/next.js/commit/93cb9089…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v15.5.21	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.2.11	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 15.5.0, < 15.5.21 Affected: >= 16.0.0, < 16.2.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-64644",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-27T18:35:34.937230Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-27T18:35:41.443Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 15.5.0, \u003c 15.5.21"
            },
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.2.11"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. In versions 15.5.0 through 15.5.20 and 16.0.0 through 16.2.10, when self-hosting Next.js with the default image loader, the Image Optimization API can optimize remotely hosted images if configured (not enabled by default). If those images contain malicious content, they can cause CPU exhaustion in /_next/image endpoints.Only config.images.remotePatterns is affected, and just the patterns in that array, whereas config.images.unoptimized: true, config.images.loader: \u0027custom\u0027, and Vercel are not impacted. This issue has been fixed in versions 15.5.21 and 16.2.11."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-407",
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-27T17:54:52.530Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-q8wf-6r8g-63ch",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-q8wf-6r8g-63ch"
        },
        {
          "name": "https://github.com/vercel/next.js/pull/96006",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/pull/96006"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/93cb90891402fa4c47798d03cb9e05c13233766c",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/93cb90891402fa4c47798d03cb9e05c13233766c"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v15.5.21",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v15.5.21"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.2.11",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.2.11"
        }
      ],
      "source": {
        "advisory": "GHSA-q8wf-6r8g-63ch",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Denial of Service in the Image Optimization API using SVGs"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-64644",
    "datePublished": "2026-07-27T17:54:52.530Z",
    "dateReserved": "2026-07-20T17:11:30.895Z",
    "dateUpdated": "2026-07-27T18:35:41.443Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-64643 (GCVE-0-2026-64643)

Vulnerability from cvelistv5 – Published: 2026-07-27 17:48 – Updated: 2026-07-27 18:21

Title

Next.js: Unauthenticated Disclosure of Internal Server Function endpoints

Summary

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, Next.js applications using App Router, Server Actions (use server) or use cache endpoints can be disclosed bypassing any authentication on the pages where these endpoints are usually used. Server Action IDs can be disclosed to unauthenticated users via publicly served client artifacts (for example, static chunks containing action references). Affected users are applications using App Router and Server Actions. By itself, this disclosure is typically a recon/enumeration primitive; however, it can increase risk when combined with other weaknesses. This issue has been fixed in versions 15.5.21 and 16.2.11.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-27 18:20 UTC

CWE

CWE-201 - Insertion of Sensitive Information Into Sent Data

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/commit/1b0c3ae9…	x_refsource_MISC
https://github.com/vercel/next.js/commit/ff12a612…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v15.5.21	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.2.11	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 13.0.0, < 15.5.21 Affected: >= 16.0.0, < 16.2.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-64643",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-27T18:20:57.639287Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-27T18:21:55.549Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 15.5.21"
            },
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.2.11"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, Next.js applications using App Router, Server Actions (use server) or use cache endpoints can be disclosed bypassing any authentication on the pages where these endpoints are usually used. Server Action IDs can be disclosed to unauthenticated users via publicly served client artifacts (for example, static chunks containing action references). Affected users are applications using App Router and Server Actions. By itself, this disclosure is typically a recon/enumeration primitive; however, it can increase risk when combined with other weaknesses. This issue has been fixed in versions 15.5.21 and 16.2.11."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-201",
              "description": "CWE-201: Insertion of Sensitive Information Into Sent Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-27T17:48:17.575Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-955p-x3mx-jcvp",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-955p-x3mx-jcvp"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/1b0c3ae912a3ad925c60065cc8d55b070fa8bcd3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/1b0c3ae912a3ad925c60065cc8d55b070fa8bcd3"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/ff12a6124e1504f17b62de948b8a553fdecaef7b",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/ff12a6124e1504f17b62de948b8a553fdecaef7b"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v15.5.21",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v15.5.21"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.2.11",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.2.11"
        }
      ],
      "source": {
        "advisory": "GHSA-955p-x3mx-jcvp",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Unauthenticated Disclosure of Internal Server Function endpoints"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-64643",
    "datePublished": "2026-07-27T17:48:17.575Z",
    "dateReserved": "2026-07-20T17:11:30.895Z",
    "dateUpdated": "2026-07-27T18:21:55.549Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-64642 (GCVE-0-2026-64642)

Vulnerability from cvelistv5 – Published: 2026-07-27 17:45 – Updated: 2026-07-28 15:20

Title

Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Summary

Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. This issue has been fixed in version 16.2.11.

Severity

8.3 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-28 15:07 UTC

CWE

CWE-285 - Improper Authorization

Assigner

GitHub_M mitre root

References

4 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/pull/96014	x_refsource_MISC
https://github.com/vercel/next.js/commit/6bf4df14…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.2.11	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 16.0.0, < 16.2.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-64642",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-28T15:07:35.483250Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-28T15:20:33.639Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.2.11"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. This issue has been fixed in version 16.2.11."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "CWE-285: Improper Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-27T17:45:40.761Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-6gpp-xcg3-4w24",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-6gpp-xcg3-4w24"
        },
        {
          "name": "https://github.com/vercel/next.js/pull/96014",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/pull/96014"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/6bf4df14508ad6c0cd46af50c6051ee42f2d9151",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/6bf4df14508ad6c0cd46af50c6051ee42f2d9151"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.2.11",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.2.11"
        }
      ],
      "source": {
        "advisory": "GHSA-6gpp-xcg3-4w24",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-64642",
    "datePublished": "2026-07-27T17:45:40.761Z",
    "dateReserved": "2026-07-20T17:11:30.895Z",
    "dateUpdated": "2026-07-28T15:20:33.639Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-64641 (GCVE-0-2026-64641)

Vulnerability from cvelistv5 – Published: 2026-07-27 17:40 – Updated: 2026-07-27 18:54

Title

Next.js: Denial of Service in App Router using Server Actions

Summary

Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU usage blocking processing of further requests in the same process. This issue has been fixed in versions 15.5.21 and 16.2.11.

Severity

8.2 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-27 18:54 UTC

CWE

CWE-834 - Excessive Iteration

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/pull/96013	x_refsource_MISC
https://github.com/vercel/next.js/commit/01962857…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v15.5.21	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.2.11	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 13.0.0, < 15.5.21 Affected: >= 16.0.0, < 16.2.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-64641",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-27T18:54:52.018065Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-27T18:54:59.134Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 15.5.21"
            },
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.2.11"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU usage blocking processing of further requests in the same process. This issue has been fixed in versions 15.5.21 and 16.2.11."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-834",
              "description": "CWE-834: Excessive Iteration",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-27T17:40:01.137Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-m99w-x7hq-7vfj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-m99w-x7hq-7vfj"
        },
        {
          "name": "https://github.com/vercel/next.js/pull/96013",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/pull/96013"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/019628571641dec57aaf349ba0c360e3964e6f12",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/019628571641dec57aaf349ba0c360e3964e6f12"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v15.5.21",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v15.5.21"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.2.11",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.2.11"
        }
      ],
      "source": {
        "advisory": "GHSA-m99w-x7hq-7vfj",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Denial of Service in App Router using Server Actions"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-64641",
    "datePublished": "2026-07-27T17:40:01.137Z",
    "dateReserved": "2026-07-20T17:11:30.895Z",
    "dateUpdated": "2026-07-27T18:54:59.134Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-64645 (GCVE-0-2026-64645)

Vulnerability from cvelistv5 – Published: 2026-07-27 17:37 – Updated: 2026-07-28 14:02

Title

Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Summary

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a rewrites() or redirects() rule that builds its external destination hostname from request-controlled input can be pointed at an arbitrary hostname, regardless of the rule's hostname suffix. For a rewrite, Next.js proxies the request to that arbitrary host and serves the response from the application's origin, leading to Server-Side Request forgery. A redirects() rule configured this way is vulnerable to an Open Redirect. This issue has been fixed in versions 15.5.21 and 16.2.11.

Severity

8.3 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-28 14:01 UTC

CWE

CWE-918 - Server-Side Request Forgery (SSRF)
CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://github.com/vercel/next.js/commit/35f50135…	x_refsource_MISC
https://github.com/vercel/next.js/commit/d3033266…	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v15.5.21	x_refsource_MISC
https://github.com/vercel/next.js/releases/tag/v16.2.11	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 12.0.0 < 15.5.21 Affected: >= 16.0.0, < 16.2.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-64645",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-28T14:01:56.498968Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-28T14:02:21.877Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 12.0.0 \u003c 15.5.21"
            },
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.2.11"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a\n rewrites() or redirects() rule that builds its external destination hostname from request-controlled input can be pointed at an arbitrary hostname, regardless of the rule\u0027s hostname suffix. For a rewrite, Next.js proxies the request to that arbitrary host and serves the response from the application\u0027s origin, leading to Server-Side Request forgery. A redirects() rule configured this way is vulnerable to an Open Redirect. This issue has been fixed in versions 15.5.21 and 16.2.11."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "CWE-601: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-27T17:37:07.695Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-p9j2-gv94-2wf4",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-p9j2-gv94-2wf4"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/35f501357e9b0fe7c950b0d6aa8fcf5343f707e9",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/35f501357e9b0fe7c950b0d6aa8fcf5343f707e9"
        },
        {
          "name": "https://github.com/vercel/next.js/commit/d3033266c6dff23f7be71e19341fe3a8c6e2c599",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/commit/d3033266c6dff23f7be71e19341fe3a8c6e2c599"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v15.5.21",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v15.5.21"
        },
        {
          "name": "https://github.com/vercel/next.js/releases/tag/v16.2.11",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/next.js/releases/tag/v16.2.11"
        }
      ],
      "source": {
        "advisory": "GHSA-p9j2-gv94-2wf4",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-64645",
    "datePublished": "2026-07-27T17:37:07.695Z",
    "dateReserved": "2026-07-20T17:11:30.895Z",
    "dateUpdated": "2026-07-28T14:02:21.877Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-64650 (GCVE-0-2026-64650)

Vulnerability from cvelistv5 – Published: 2026-07-20 20:27 – Updated: 2026-07-20 21:45

Title

AI SDK Codex Harness Tool Relay Authorization Bypass

Summary

The `@ai-sdk/harness-opencode` tool is an HarnessV1 adapter backed by @openai/codex-sdk, which drives the codex command line interface. Prior to version 1.0.29, the tool relay authorizes requests from any process whose command line contains an allowed helper script path (the Codex CLI shim). This allows untrusted code executing in the sandbox to invoke arbitrary host-exposed tools, including secret lookups, deployment operations, and cloud API calls without a corresponding model-authorized tool-call event. Exploitation requires a Linux environment (the vulnerable fallback checks `process.platform === 'linux'` and reads `/proc`); an active harness session with one or more host-provided tools; and untrusted code executing in the sandbox (e.g. a malicious dependency, build script, or lifecycle hook) The fix in version 1.0.29 removes the process-path authorization fallback entirely. Relay requests are now only accepted after exact, short-lived, one-time authorization matching the tool name and input from a bridge-observed model event. Some workarounds are available. Do not run the Codex harness on untrusted repositories or with untrusted dependencies, and/or limit host-exposed tools to non-sensitive operations when working with untrusted code.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-20 21:45 UTC

CWE

CWE-863 - Incorrect Authorization

Assigner

GitHub_M mitre root

References

2 references

URL	Tags
https://github.com/vercel/ai/security/advisories/…	x_refsource_CONFIRM
https://github.com/vercel/ai/pull/17105	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	@ai-sdk/harness-codex	Affected: < 1.0.29

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-64650",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-20T21:45:38.151412Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-20T21:45:44.027Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "@ai-sdk/harness-codex",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.0.29"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The `@ai-sdk/harness-opencode` tool is an HarnessV1 adapter backed by @openai/codex-sdk, which drives the codex command line interface. Prior to version 1.0.29, the tool relay authorizes requests from any process whose command line contains an allowed helper script path (the Codex CLI shim). This allows untrusted code executing in the sandbox to invoke arbitrary host-exposed tools, including secret lookups, deployment operations, and cloud API calls  without a corresponding model-authorized tool-call event. Exploitation requires a Linux environment (the vulnerable fallback checks `process.platform === \u0027linux\u0027` and reads `/proc`); an active harness session with one or more host-provided tools; and untrusted code executing in the sandbox (e.g. a malicious dependency, build script, or lifecycle hook) The fix in version 1.0.29 removes the process-path authorization fallback entirely. Relay requests are now only accepted after exact, short-lived, one-time authorization matching the tool name and input from a bridge-observed model event. Some workarounds are available. Do not run the Codex harness on untrusted repositories or with untrusted dependencies, and/or limit host-exposed tools to non-sensitive operations when working with untrusted code."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863: Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-20T20:27:41.349Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/ai/security/advisories/GHSA-qw9h-448j-6rph",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/ai/security/advisories/GHSA-qw9h-448j-6rph"
        },
        {
          "name": "https://github.com/vercel/ai/pull/17105",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/ai/pull/17105"
        }
      ],
      "source": {
        "advisory": "GHSA-qw9h-448j-6rph",
        "discovery": "UNKNOWN"
      },
      "title": "AI SDK Codex Harness Tool Relay Authorization Bypass"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-64650",
    "datePublished": "2026-07-20T20:27:41.349Z",
    "dateReserved": "2026-07-20T17:11:30.895Z",
    "dateUpdated": "2026-07-20T21:45:44.027Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-64651 (GCVE-0-2026-64651)

Vulnerability from cvelistv5 – Published: 2026-07-20 20:26 – Updated: 2026-07-21 12:49

Title

AI SDK OpenCode Harness Tool Relay Authorization Bypass

Summary

The `@ai-sdk/harness-opencode` tool connects HarnessAgent to OpenCode through a sandboxed bridge. Prior to version 1.0.28, the tool relay authorizes requests from any process whose command line contains an allowed helper script path (`host-tool-mcp.mjs`). This allows untrusted code executing in the sandbox to invoke arbitrary host-exposed tools including secret lookups, deployment operations, and cloud API calls without a corresponding model-authorized tool-call event. Exploitation requires a Linux environment (the vulnerable fallback checks `process.platform === 'linux'` and reads `/proc`); an active harness session with one or more host-provided tools; and untrusted code executing in the sandbox (e.g. a malicious dependency, build script, or lifecycle hook) The fix in version 1.0.28 removes the process-path authorization fallback entirely. Relay requests are now only accepted after exact, short-lived, one-time authorization matching the tool name and input from a bridge-observed model event. Some workarounds are available. Do not run the OpenCode harness on untrusted repositories or with untrusted dependencies, and/or limit host-exposed tools to non-sensitive operations when working with untrusted code.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-21 12:49 UTC

CWE

CWE-863 - Incorrect Authorization

Assigner

GitHub_M mitre root

References

2 references

URL	Tags
https://github.com/vercel/ai/security/advisories/…	x_refsource_CONFIRM
https://github.com/vercel/ai/pull/17105	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vercel	@ai-sdk/harness-opencode	Affected: < 1.0.29

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-64651",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-21T12:49:24.395782Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-21T12:49:47.977Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "@ai-sdk/harness-opencode",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.0.29"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The `@ai-sdk/harness-opencode` tool connects HarnessAgent to OpenCode through a sandboxed bridge. Prior to version 1.0.28, the tool relay authorizes requests from any process whose command line contains an allowed helper script path (`host-tool-mcp.mjs`). This allows untrusted code executing in the sandbox to invoke arbitrary host-exposed tools including secret lookups, deployment operations, and cloud API calls without a corresponding model-authorized tool-call event. Exploitation requires a Linux environment (the vulnerable fallback checks `process.platform === \u0027linux\u0027` and reads `/proc`); an active harness session with one or more host-provided tools; and untrusted code executing in the sandbox (e.g. a malicious dependency, build script, or lifecycle hook) The fix in version 1.0.28 removes the process-path authorization fallback entirely. Relay requests are now only accepted after exact, short-lived, one-time authorization matching the tool name and input from a bridge-observed model event. Some workarounds are available. Do not run the OpenCode harness on untrusted repositories or with untrusted dependencies, and/or limit host-exposed tools to non-sensitive operations when working with untrusted code."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863: Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-20T20:26:07.497Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/ai/security/advisories/GHSA-g48p-5rr5-8rgq",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/ai/security/advisories/GHSA-g48p-5rr5-8rgq"
        },
        {
          "name": "https://github.com/vercel/ai/pull/17105",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vercel/ai/pull/17105"
        }
      ],
      "source": {
        "advisory": "GHSA-g48p-5rr5-8rgq",
        "discovery": "UNKNOWN"
      },
      "title": "AI SDK OpenCode Harness Tool Relay Authorization Bypass"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-64651",
    "datePublished": "2026-07-20T20:26:07.497Z",
    "dateReserved": "2026-07-20T17:11:30.896Z",
    "dateUpdated": "2026-07-21T12:49:47.977Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8769 (GCVE-0-2026-8769)

Vulnerability from cvelistv5 – Published: 2026-05-17 23:00 – Updated: 2026-05-18 20:13

Title

vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption

Summary

A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

4.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-18 20:12 UTC

CWE

CWE-400 - Resource Consumption
CWE-404 - Denial of Service

Assigner

VulDB mitre root

References

4 references

URL	Tags
https://vuldb.com/vuln/364394	vdb-entrytechnical-description
https://vuldb.com/vuln/364394/cti	signaturepermissions-required
https://vuldb.com/submit/811406	third-party-advisory
https://gist.github.com/YLChen-007/fb1096bc8428be…	exploit

Impacted products

1 product

Vendor	Product	Version
vercel	ai	Affected: 3.0.0 Affected: 3.0.1 Affected: 3.0.2 Affected: 3.0.3 Affected: 3.0.4 Affected: 3.0.5 Affected: 3.0.6 Affected: 3.0.7 Affected: 3.0.8 Affected: 3.0.9 Affected: 3.0.10 Affected: 3.0.11 Affected: 3.0.12 Affected: 3.0.13 Affected: 3.0.14 Affected: 3.0.15 Affected: 3.0.16 Affected: 3.0.17 Affected: 3.0.18 Affected: 3.0.19 Affected: 3.0.20 Affected: 3.0.21 Affected: 3.0.22 Affected: 3.0.23 Affected: 3.0.24 Affected: 3.0.25 Affected: 3.0.26 Affected: 3.0.27 Affected: 3.0.28 Affected: 3.0.29 Affected: 3.0.30 Affected: 3.0.31 Affected: 3.0.32 Affected: 3.0.33 Affected: 3.0.34 Affected: 3.0.35 Affected: 3.0.36 Affected: 3.0.37 Affected: 3.0.38 Affected: 3.0.39 Affected: 3.0.40 Affected: 3.0.41 Affected: 3.0.42 Affected: 3.0.43 Affected: 3.0.44 Affected: 3.0.45 Affected: 3.0.46 Affected: 3.0.47 Affected: 3.0.48 Affected: 3.0.49 Affected: 3.0.50 Affected: 3.0.51 Affected: 3.0.52 Affected: 3.0.53 Affected: 3.0.54 Affected: 3.0.55 Affected: 3.0.56 Affected: 3.0.57 Affected: 3.0.58 Affected: 3.0.59 Affected: 3.0.60 Affected: 3.0.61 Affected: 3.0.62 Affected: 3.0.63 Affected: 3.0.64 Affected: 3.0.65 Affected: 3.0.66 Affected: 3.0.67 Affected: 3.0.68 Affected: 3.0.69 Affected: 3.0.70 Affected: 3.0.71 Affected: 3.0.72 Affected: 3.0.73 Affected: 3.0.74 Affected: 3.0.75 Affected: 3.0.76 Affected: 3.0.77 Affected: 3.0.78 Affected: 3.0.79 Affected: 3.0.80 Affected: 3.0.81 Affected: 3.0.82 Affected: 3.0.83 Affected: 3.0.84 Affected: 3.0.85 Affected: 3.0.86 Affected: 3.0.87 Affected: 3.0.88 Affected: 3.0.89 Affected: 3.0.90 Affected: 3.0.91 Affected: 3.0.92 Affected: 3.0.93 Affected: 3.0.94 Affected: 3.0.95 Affected: 3.0.96 Affected: 3.0.97 cpe:2.3:a:vercel:ai::::::::

Credits

Eric-f (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-8769",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-18T20:12:31.099819Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-18T20:13:40.558Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:vercel:ai:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "provider-utils"
          ],
          "product": "ai",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "3.0.0"
            },
            {
              "status": "affected",
              "version": "3.0.1"
            },
            {
              "status": "affected",
              "version": "3.0.2"
            },
            {
              "status": "affected",
              "version": "3.0.3"
            },
            {
              "status": "affected",
              "version": "3.0.4"
            },
            {
              "status": "affected",
              "version": "3.0.5"
            },
            {
              "status": "affected",
              "version": "3.0.6"
            },
            {
              "status": "affected",
              "version": "3.0.7"
            },
            {
              "status": "affected",
              "version": "3.0.8"
            },
            {
              "status": "affected",
              "version": "3.0.9"
            },
            {
              "status": "affected",
              "version": "3.0.10"
            },
            {
              "status": "affected",
              "version": "3.0.11"
            },
            {
              "status": "affected",
              "version": "3.0.12"
            },
            {
              "status": "affected",
              "version": "3.0.13"
            },
            {
              "status": "affected",
              "version": "3.0.14"
            },
            {
              "status": "affected",
              "version": "3.0.15"
            },
            {
              "status": "affected",
              "version": "3.0.16"
            },
            {
              "status": "affected",
              "version": "3.0.17"
            },
            {
              "status": "affected",
              "version": "3.0.18"
            },
            {
              "status": "affected",
              "version": "3.0.19"
            },
            {
              "status": "affected",
              "version": "3.0.20"
            },
            {
              "status": "affected",
              "version": "3.0.21"
            },
            {
              "status": "affected",
              "version": "3.0.22"
            },
            {
              "status": "affected",
              "version": "3.0.23"
            },
            {
              "status": "affected",
              "version": "3.0.24"
            },
            {
              "status": "affected",
              "version": "3.0.25"
            },
            {
              "status": "affected",
              "version": "3.0.26"
            },
            {
              "status": "affected",
              "version": "3.0.27"
            },
            {
              "status": "affected",
              "version": "3.0.28"
            },
            {
              "status": "affected",
              "version": "3.0.29"
            },
            {
              "status": "affected",
              "version": "3.0.30"
            },
            {
              "status": "affected",
              "version": "3.0.31"
            },
            {
              "status": "affected",
              "version": "3.0.32"
            },
            {
              "status": "affected",
              "version": "3.0.33"
            },
            {
              "status": "affected",
              "version": "3.0.34"
            },
            {
              "status": "affected",
              "version": "3.0.35"
            },
            {
              "status": "affected",
              "version": "3.0.36"
            },
            {
              "status": "affected",
              "version": "3.0.37"
            },
            {
              "status": "affected",
              "version": "3.0.38"
            },
            {
              "status": "affected",
              "version": "3.0.39"
            },
            {
              "status": "affected",
              "version": "3.0.40"
            },
            {
              "status": "affected",
              "version": "3.0.41"
            },
            {
              "status": "affected",
              "version": "3.0.42"
            },
            {
              "status": "affected",
              "version": "3.0.43"
            },
            {
              "status": "affected",
              "version": "3.0.44"
            },
            {
              "status": "affected",
              "version": "3.0.45"
            },
            {
              "status": "affected",
              "version": "3.0.46"
            },
            {
              "status": "affected",
              "version": "3.0.47"
            },
            {
              "status": "affected",
              "version": "3.0.48"
            },
            {
              "status": "affected",
              "version": "3.0.49"
            },
            {
              "status": "affected",
              "version": "3.0.50"
            },
            {
              "status": "affected",
              "version": "3.0.51"
            },
            {
              "status": "affected",
              "version": "3.0.52"
            },
            {
              "status": "affected",
              "version": "3.0.53"
            },
            {
              "status": "affected",
              "version": "3.0.54"
            },
            {
              "status": "affected",
              "version": "3.0.55"
            },
            {
              "status": "affected",
              "version": "3.0.56"
            },
            {
              "status": "affected",
              "version": "3.0.57"
            },
            {
              "status": "affected",
              "version": "3.0.58"
            },
            {
              "status": "affected",
              "version": "3.0.59"
            },
            {
              "status": "affected",
              "version": "3.0.60"
            },
            {
              "status": "affected",
              "version": "3.0.61"
            },
            {
              "status": "affected",
              "version": "3.0.62"
            },
            {
              "status": "affected",
              "version": "3.0.63"
            },
            {
              "status": "affected",
              "version": "3.0.64"
            },
            {
              "status": "affected",
              "version": "3.0.65"
            },
            {
              "status": "affected",
              "version": "3.0.66"
            },
            {
              "status": "affected",
              "version": "3.0.67"
            },
            {
              "status": "affected",
              "version": "3.0.68"
            },
            {
              "status": "affected",
              "version": "3.0.69"
            },
            {
              "status": "affected",
              "version": "3.0.70"
            },
            {
              "status": "affected",
              "version": "3.0.71"
            },
            {
              "status": "affected",
              "version": "3.0.72"
            },
            {
              "status": "affected",
              "version": "3.0.73"
            },
            {
              "status": "affected",
              "version": "3.0.74"
            },
            {
              "status": "affected",
              "version": "3.0.75"
            },
            {
              "status": "affected",
              "version": "3.0.76"
            },
            {
              "status": "affected",
              "version": "3.0.77"
            },
            {
              "status": "affected",
              "version": "3.0.78"
            },
            {
              "status": "affected",
              "version": "3.0.79"
            },
            {
              "status": "affected",
              "version": "3.0.80"
            },
            {
              "status": "affected",
              "version": "3.0.81"
            },
            {
              "status": "affected",
              "version": "3.0.82"
            },
            {
              "status": "affected",
              "version": "3.0.83"
            },
            {
              "status": "affected",
              "version": "3.0.84"
            },
            {
              "status": "affected",
              "version": "3.0.85"
            },
            {
              "status": "affected",
              "version": "3.0.86"
            },
            {
              "status": "affected",
              "version": "3.0.87"
            },
            {
              "status": "affected",
              "version": "3.0.88"
            },
            {
              "status": "affected",
              "version": "3.0.89"
            },
            {
              "status": "affected",
              "version": "3.0.90"
            },
            {
              "status": "affected",
              "version": "3.0.91"
            },
            {
              "status": "affected",
              "version": "3.0.92"
            },
            {
              "status": "affected",
              "version": "3.0.93"
            },
            {
              "status": "affected",
              "version": "3.0.94"
            },
            {
              "status": "affected",
              "version": "3.0.95"
            },
            {
              "status": "affected",
              "version": "3.0.96"
            },
            {
              "status": "affected",
              "version": "3.0.97"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Eric-f (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 4,
            "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-404",
              "description": "Denial of Service",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-17T23:00:13.988Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-364394 | vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/364394"
        },
        {
          "name": "VDB-364394 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/364394/cti"
        },
        {
          "name": "Submit #811406 | vercel ai @ai-sdk/amazon-bedrock@3.0.97 Uncontrolled Resource Consumption (CWE-400)",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/811406"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://gist.github.com/YLChen-007/fb1096bc8428bed9a428f764d9d103bb"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-17T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-05-17T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-05-17T11:33:28.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-8769",
    "datePublished": "2026-05-17T23:00:13.988Z",
    "dateReserved": "2026-05-17T09:28:09.002Z",
    "dateUpdated": "2026-05-18T20:13:40.558Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8768 (GCVE-0-2026-8768)

Vulnerability from cvelistv5 – Published: 2026-05-17 22:45 – Updated: 2026-05-18 10:41

Title

vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery

Summary

A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

7.3 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-18 10:28 UTC

CWE

CWE-918 - Server-Side Request Forgery

Assigner

VulDB mitre root

References

6 references

URL	Tags
https://vuldb.com/vuln/364393	vdb-entrytechnical-description
https://vuldb.com/vuln/364393/cti	signaturepermissions-required
https://vuldb.com/submit/811404	third-party-advisory
https://vuldb.com/submit/811405	third-party-advisory
https://gist.github.com/YLChen-007/07d149bd68adbe…	related
https://gist.github.com/YLChen-007/cf7e47e4dda392…	exploit

Impacted products

1 product

Vendor	Product	Version
vercel	ai	Affected: 3.0.0 Affected: 3.0.1 Affected: 3.0.2 Affected: 3.0.3 Affected: 3.0.4 Affected: 3.0.5 Affected: 3.0.6 Affected: 3.0.7 Affected: 3.0.8 Affected: 3.0.9 Affected: 3.0.10 Affected: 3.0.11 Affected: 3.0.12 Affected: 3.0.13 Affected: 3.0.14 Affected: 3.0.15 Affected: 3.0.16 Affected: 3.0.17 Affected: 3.0.18 Affected: 3.0.19 Affected: 3.0.20 Affected: 3.0.21 Affected: 3.0.22 Affected: 3.0.23 Affected: 3.0.24 Affected: 3.0.25 Affected: 3.0.26 Affected: 3.0.27 Affected: 3.0.28 Affected: 3.0.29 Affected: 3.0.30 Affected: 3.0.31 Affected: 3.0.32 Affected: 3.0.33 Affected: 3.0.34 Affected: 3.0.35 Affected: 3.0.36 Affected: 3.0.37 Affected: 3.0.38 Affected: 3.0.39 Affected: 3.0.40 Affected: 3.0.41 Affected: 3.0.42 Affected: 3.0.43 Affected: 3.0.44 Affected: 3.0.45 Affected: 3.0.46 Affected: 3.0.47 Affected: 3.0.48 Affected: 3.0.49 Affected: 3.0.50 Affected: 3.0.51 Affected: 3.0.52 Affected: 3.0.53 Affected: 3.0.54 Affected: 3.0.55 Affected: 3.0.56 Affected: 3.0.57 Affected: 3.0.58 Affected: 3.0.59 Affected: 3.0.60 Affected: 3.0.61 Affected: 3.0.62 Affected: 3.0.63 Affected: 3.0.64 Affected: 3.0.65 Affected: 3.0.66 Affected: 3.0.67 Affected: 3.0.68 Affected: 3.0.69 Affected: 3.0.70 Affected: 3.0.71 Affected: 3.0.72 Affected: 3.0.73 Affected: 3.0.74 Affected: 3.0.75 Affected: 3.0.76 Affected: 3.0.77 Affected: 3.0.78 Affected: 3.0.79 Affected: 3.0.80 Affected: 3.0.81 Affected: 3.0.82 Affected: 3.0.83 Affected: 3.0.84 Affected: 3.0.85 Affected: 3.0.86 Affected: 3.0.87 Affected: 3.0.88 Affected: 3.0.89 Affected: 3.0.90 Affected: 3.0.91 Affected: 3.0.92 Affected: 3.0.93 Affected: 3.0.94 Affected: 3.0.95 Affected: 3.0.96 Affected: 3.0.97 cpe:2.3:a:vercel:ai::::::::

Credits

Eric-f (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-8768",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-18T10:28:23.079110Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-18T10:41:00.465Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:vercel:ai:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "provider-utils"
          ],
          "product": "ai",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "3.0.0"
            },
            {
              "status": "affected",
              "version": "3.0.1"
            },
            {
              "status": "affected",
              "version": "3.0.2"
            },
            {
              "status": "affected",
              "version": "3.0.3"
            },
            {
              "status": "affected",
              "version": "3.0.4"
            },
            {
              "status": "affected",
              "version": "3.0.5"
            },
            {
              "status": "affected",
              "version": "3.0.6"
            },
            {
              "status": "affected",
              "version": "3.0.7"
            },
            {
              "status": "affected",
              "version": "3.0.8"
            },
            {
              "status": "affected",
              "version": "3.0.9"
            },
            {
              "status": "affected",
              "version": "3.0.10"
            },
            {
              "status": "affected",
              "version": "3.0.11"
            },
            {
              "status": "affected",
              "version": "3.0.12"
            },
            {
              "status": "affected",
              "version": "3.0.13"
            },
            {
              "status": "affected",
              "version": "3.0.14"
            },
            {
              "status": "affected",
              "version": "3.0.15"
            },
            {
              "status": "affected",
              "version": "3.0.16"
            },
            {
              "status": "affected",
              "version": "3.0.17"
            },
            {
              "status": "affected",
              "version": "3.0.18"
            },
            {
              "status": "affected",
              "version": "3.0.19"
            },
            {
              "status": "affected",
              "version": "3.0.20"
            },
            {
              "status": "affected",
              "version": "3.0.21"
            },
            {
              "status": "affected",
              "version": "3.0.22"
            },
            {
              "status": "affected",
              "version": "3.0.23"
            },
            {
              "status": "affected",
              "version": "3.0.24"
            },
            {
              "status": "affected",
              "version": "3.0.25"
            },
            {
              "status": "affected",
              "version": "3.0.26"
            },
            {
              "status": "affected",
              "version": "3.0.27"
            },
            {
              "status": "affected",
              "version": "3.0.28"
            },
            {
              "status": "affected",
              "version": "3.0.29"
            },
            {
              "status": "affected",
              "version": "3.0.30"
            },
            {
              "status": "affected",
              "version": "3.0.31"
            },
            {
              "status": "affected",
              "version": "3.0.32"
            },
            {
              "status": "affected",
              "version": "3.0.33"
            },
            {
              "status": "affected",
              "version": "3.0.34"
            },
            {
              "status": "affected",
              "version": "3.0.35"
            },
            {
              "status": "affected",
              "version": "3.0.36"
            },
            {
              "status": "affected",
              "version": "3.0.37"
            },
            {
              "status": "affected",
              "version": "3.0.38"
            },
            {
              "status": "affected",
              "version": "3.0.39"
            },
            {
              "status": "affected",
              "version": "3.0.40"
            },
            {
              "status": "affected",
              "version": "3.0.41"
            },
            {
              "status": "affected",
              "version": "3.0.42"
            },
            {
              "status": "affected",
              "version": "3.0.43"
            },
            {
              "status": "affected",
              "version": "3.0.44"
            },
            {
              "status": "affected",
              "version": "3.0.45"
            },
            {
              "status": "affected",
              "version": "3.0.46"
            },
            {
              "status": "affected",
              "version": "3.0.47"
            },
            {
              "status": "affected",
              "version": "3.0.48"
            },
            {
              "status": "affected",
              "version": "3.0.49"
            },
            {
              "status": "affected",
              "version": "3.0.50"
            },
            {
              "status": "affected",
              "version": "3.0.51"
            },
            {
              "status": "affected",
              "version": "3.0.52"
            },
            {
              "status": "affected",
              "version": "3.0.53"
            },
            {
              "status": "affected",
              "version": "3.0.54"
            },
            {
              "status": "affected",
              "version": "3.0.55"
            },
            {
              "status": "affected",
              "version": "3.0.56"
            },
            {
              "status": "affected",
              "version": "3.0.57"
            },
            {
              "status": "affected",
              "version": "3.0.58"
            },
            {
              "status": "affected",
              "version": "3.0.59"
            },
            {
              "status": "affected",
              "version": "3.0.60"
            },
            {
              "status": "affected",
              "version": "3.0.61"
            },
            {
              "status": "affected",
              "version": "3.0.62"
            },
            {
              "status": "affected",
              "version": "3.0.63"
            },
            {
              "status": "affected",
              "version": "3.0.64"
            },
            {
              "status": "affected",
              "version": "3.0.65"
            },
            {
              "status": "affected",
              "version": "3.0.66"
            },
            {
              "status": "affected",
              "version": "3.0.67"
            },
            {
              "status": "affected",
              "version": "3.0.68"
            },
            {
              "status": "affected",
              "version": "3.0.69"
            },
            {
              "status": "affected",
              "version": "3.0.70"
            },
            {
              "status": "affected",
              "version": "3.0.71"
            },
            {
              "status": "affected",
              "version": "3.0.72"
            },
            {
              "status": "affected",
              "version": "3.0.73"
            },
            {
              "status": "affected",
              "version": "3.0.74"
            },
            {
              "status": "affected",
              "version": "3.0.75"
            },
            {
              "status": "affected",
              "version": "3.0.76"
            },
            {
              "status": "affected",
              "version": "3.0.77"
            },
            {
              "status": "affected",
              "version": "3.0.78"
            },
            {
              "status": "affected",
              "version": "3.0.79"
            },
            {
              "status": "affected",
              "version": "3.0.80"
            },
            {
              "status": "affected",
              "version": "3.0.81"
            },
            {
              "status": "affected",
              "version": "3.0.82"
            },
            {
              "status": "affected",
              "version": "3.0.83"
            },
            {
              "status": "affected",
              "version": "3.0.84"
            },
            {
              "status": "affected",
              "version": "3.0.85"
            },
            {
              "status": "affected",
              "version": "3.0.86"
            },
            {
              "status": "affected",
              "version": "3.0.87"
            },
            {
              "status": "affected",
              "version": "3.0.88"
            },
            {
              "status": "affected",
              "version": "3.0.89"
            },
            {
              "status": "affected",
              "version": "3.0.90"
            },
            {
              "status": "affected",
              "version": "3.0.91"
            },
            {
              "status": "affected",
              "version": "3.0.92"
            },
            {
              "status": "affected",
              "version": "3.0.93"
            },
            {
              "status": "affected",
              "version": "3.0.94"
            },
            {
              "status": "affected",
              "version": "3.0.95"
            },
            {
              "status": "affected",
              "version": "3.0.96"
            },
            {
              "status": "affected",
              "version": "3.0.97"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Eric-f (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 7.5,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "Server-Side Request Forgery",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-17T22:45:09.929Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-364393 | vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/364393"
        },
        {
          "name": "VDB-364393 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/364393/cti"
        },
        {
          "name": "Submit #811404 | vercel ai @ai-sdk/amazon-bedrock@3.0.97 Server-Side Request Forgery (SSRF) (CWE-918)",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/811404"
        },
        {
          "name": "Submit #811405 | vercel ai @ai-sdk/amazon-bedrock@3.0.97 Server-Side Request Forgery (SSRF) (CWE-918) (Duplicate)",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/811405"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://gist.github.com/YLChen-007/07d149bd68adbee58165b4207a2abc71"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://gist.github.com/YLChen-007/cf7e47e4dda392f474ca77a66d1d847f"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-17T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-05-17T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-05-17T11:33:13.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-8768",
    "datePublished": "2026-05-17T22:45:09.929Z",
    "dateReserved": "2026-05-17T09:28:06.447Z",
    "dateUpdated": "2026-05-18T10:41:00.465Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8767 (GCVE-0-2026-8767)

Vulnerability from cvelistv5 – Published: 2026-05-17 22:30 – Updated: 2026-05-18 14:30

Title

vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection

Summary

A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the component PR Branch Name Interpolation. The manipulation leads to os command injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

2.3 (Low)


                        
                          CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

5 (Medium)


                        
                          CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-18 14:30 UTC

CWE

CWE-78 - OS Command Injection
CWE-77 - Command Injection

Assigner

VulDB mitre root

References

4 references

URL	Tags
https://vuldb.com/vuln/364392	vdb-entrytechnical-description
https://vuldb.com/vuln/364392/cti	signaturepermissions-required
https://vuldb.com/submit/811402	third-party-advisory
https://gist.github.com/YLChen-007/870bd6966cd847…	exploit

Impacted products

1 product

Vendor	Product	Version
vercel	ai	Affected: 3.0.0 Affected: 3.0.1 Affected: 3.0.2 Affected: 3.0.3 Affected: 3.0.4 Affected: 3.0.5 Affected: 3.0.6 Affected: 3.0.7 Affected: 3.0.8 Affected: 3.0.9 Affected: 3.0.10 Affected: 3.0.11 Affected: 3.0.12 Affected: 3.0.13 Affected: 3.0.14 Affected: 3.0.15 Affected: 3.0.16 Affected: 3.0.17 Affected: 3.0.18 Affected: 3.0.19 Affected: 3.0.20 Affected: 3.0.21 Affected: 3.0.22 Affected: 3.0.23 Affected: 3.0.24 Affected: 3.0.25 Affected: 3.0.26 Affected: 3.0.27 Affected: 3.0.28 Affected: 3.0.29 Affected: 3.0.30 Affected: 3.0.31 Affected: 3.0.32 Affected: 3.0.33 Affected: 3.0.34 Affected: 3.0.35 Affected: 3.0.36 Affected: 3.0.37 Affected: 3.0.38 Affected: 3.0.39 Affected: 3.0.40 Affected: 3.0.41 Affected: 3.0.42 Affected: 3.0.43 Affected: 3.0.44 Affected: 3.0.45 Affected: 3.0.46 Affected: 3.0.47 Affected: 3.0.48 Affected: 3.0.49 Affected: 3.0.50 Affected: 3.0.51 Affected: 3.0.52 Affected: 3.0.53 Affected: 3.0.54 Affected: 3.0.55 Affected: 3.0.56 Affected: 3.0.57 Affected: 3.0.58 Affected: 3.0.59 Affected: 3.0.60 Affected: 3.0.61 Affected: 3.0.62 Affected: 3.0.63 Affected: 3.0.64 Affected: 3.0.65 Affected: 3.0.66 Affected: 3.0.67 Affected: 3.0.68 Affected: 3.0.69 Affected: 3.0.70 Affected: 3.0.71 Affected: 3.0.72 Affected: 3.0.73 Affected: 3.0.74 Affected: 3.0.75 Affected: 3.0.76 Affected: 3.0.77 Affected: 3.0.78 Affected: 3.0.79 Affected: 3.0.80 Affected: 3.0.81 Affected: 3.0.82 Affected: 3.0.83 Affected: 3.0.84 Affected: 3.0.85 Affected: 3.0.86 Affected: 3.0.87 Affected: 3.0.88 Affected: 3.0.89 Affected: 3.0.90 Affected: 3.0.91 Affected: 3.0.92 Affected: 3.0.93 Affected: 3.0.94 Affected: 3.0.95 Affected: 3.0.96 Affected: 3.0.97 cpe:2.3:a:vercel:ai::::::::

Credits

Eric-d (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-8767",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-18T14:30:43.479216Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-18T14:30:55.942Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:vercel:ai:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "PR Branch Name Interpolation"
          ],
          "product": "ai",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "3.0.0"
            },
            {
              "status": "affected",
              "version": "3.0.1"
            },
            {
              "status": "affected",
              "version": "3.0.2"
            },
            {
              "status": "affected",
              "version": "3.0.3"
            },
            {
              "status": "affected",
              "version": "3.0.4"
            },
            {
              "status": "affected",
              "version": "3.0.5"
            },
            {
              "status": "affected",
              "version": "3.0.6"
            },
            {
              "status": "affected",
              "version": "3.0.7"
            },
            {
              "status": "affected",
              "version": "3.0.8"
            },
            {
              "status": "affected",
              "version": "3.0.9"
            },
            {
              "status": "affected",
              "version": "3.0.10"
            },
            {
              "status": "affected",
              "version": "3.0.11"
            },
            {
              "status": "affected",
              "version": "3.0.12"
            },
            {
              "status": "affected",
              "version": "3.0.13"
            },
            {
              "status": "affected",
              "version": "3.0.14"
            },
            {
              "status": "affected",
              "version": "3.0.15"
            },
            {
              "status": "affected",
              "version": "3.0.16"
            },
            {
              "status": "affected",
              "version": "3.0.17"
            },
            {
              "status": "affected",
              "version": "3.0.18"
            },
            {
              "status": "affected",
              "version": "3.0.19"
            },
            {
              "status": "affected",
              "version": "3.0.20"
            },
            {
              "status": "affected",
              "version": "3.0.21"
            },
            {
              "status": "affected",
              "version": "3.0.22"
            },
            {
              "status": "affected",
              "version": "3.0.23"
            },
            {
              "status": "affected",
              "version": "3.0.24"
            },
            {
              "status": "affected",
              "version": "3.0.25"
            },
            {
              "status": "affected",
              "version": "3.0.26"
            },
            {
              "status": "affected",
              "version": "3.0.27"
            },
            {
              "status": "affected",
              "version": "3.0.28"
            },
            {
              "status": "affected",
              "version": "3.0.29"
            },
            {
              "status": "affected",
              "version": "3.0.30"
            },
            {
              "status": "affected",
              "version": "3.0.31"
            },
            {
              "status": "affected",
              "version": "3.0.32"
            },
            {
              "status": "affected",
              "version": "3.0.33"
            },
            {
              "status": "affected",
              "version": "3.0.34"
            },
            {
              "status": "affected",
              "version": "3.0.35"
            },
            {
              "status": "affected",
              "version": "3.0.36"
            },
            {
              "status": "affected",
              "version": "3.0.37"
            },
            {
              "status": "affected",
              "version": "3.0.38"
            },
            {
              "status": "affected",
              "version": "3.0.39"
            },
            {
              "status": "affected",
              "version": "3.0.40"
            },
            {
              "status": "affected",
              "version": "3.0.41"
            },
            {
              "status": "affected",
              "version": "3.0.42"
            },
            {
              "status": "affected",
              "version": "3.0.43"
            },
            {
              "status": "affected",
              "version": "3.0.44"
            },
            {
              "status": "affected",
              "version": "3.0.45"
            },
            {
              "status": "affected",
              "version": "3.0.46"
            },
            {
              "status": "affected",
              "version": "3.0.47"
            },
            {
              "status": "affected",
              "version": "3.0.48"
            },
            {
              "status": "affected",
              "version": "3.0.49"
            },
            {
              "status": "affected",
              "version": "3.0.50"
            },
            {
              "status": "affected",
              "version": "3.0.51"
            },
            {
              "status": "affected",
              "version": "3.0.52"
            },
            {
              "status": "affected",
              "version": "3.0.53"
            },
            {
              "status": "affected",
              "version": "3.0.54"
            },
            {
              "status": "affected",
              "version": "3.0.55"
            },
            {
              "status": "affected",
              "version": "3.0.56"
            },
            {
              "status": "affected",
              "version": "3.0.57"
            },
            {
              "status": "affected",
              "version": "3.0.58"
            },
            {
              "status": "affected",
              "version": "3.0.59"
            },
            {
              "status": "affected",
              "version": "3.0.60"
            },
            {
              "status": "affected",
              "version": "3.0.61"
            },
            {
              "status": "affected",
              "version": "3.0.62"
            },
            {
              "status": "affected",
              "version": "3.0.63"
            },
            {
              "status": "affected",
              "version": "3.0.64"
            },
            {
              "status": "affected",
              "version": "3.0.65"
            },
            {
              "status": "affected",
              "version": "3.0.66"
            },
            {
              "status": "affected",
              "version": "3.0.67"
            },
            {
              "status": "affected",
              "version": "3.0.68"
            },
            {
              "status": "affected",
              "version": "3.0.69"
            },
            {
              "status": "affected",
              "version": "3.0.70"
            },
            {
              "status": "affected",
              "version": "3.0.71"
            },
            {
              "status": "affected",
              "version": "3.0.72"
            },
            {
              "status": "affected",
              "version": "3.0.73"
            },
            {
              "status": "affected",
              "version": "3.0.74"
            },
            {
              "status": "affected",
              "version": "3.0.75"
            },
            {
              "status": "affected",
              "version": "3.0.76"
            },
            {
              "status": "affected",
              "version": "3.0.77"
            },
            {
              "status": "affected",
              "version": "3.0.78"
            },
            {
              "status": "affected",
              "version": "3.0.79"
            },
            {
              "status": "affected",
              "version": "3.0.80"
            },
            {
              "status": "affected",
              "version": "3.0.81"
            },
            {
              "status": "affected",
              "version": "3.0.82"
            },
            {
              "status": "affected",
              "version": "3.0.83"
            },
            {
              "status": "affected",
              "version": "3.0.84"
            },
            {
              "status": "affected",
              "version": "3.0.85"
            },
            {
              "status": "affected",
              "version": "3.0.86"
            },
            {
              "status": "affected",
              "version": "3.0.87"
            },
            {
              "status": "affected",
              "version": "3.0.88"
            },
            {
              "status": "affected",
              "version": "3.0.89"
            },
            {
              "status": "affected",
              "version": "3.0.90"
            },
            {
              "status": "affected",
              "version": "3.0.91"
            },
            {
              "status": "affected",
              "version": "3.0.92"
            },
            {
              "status": "affected",
              "version": "3.0.93"
            },
            {
              "status": "affected",
              "version": "3.0.94"
            },
            {
              "status": "affected",
              "version": "3.0.95"
            },
            {
              "status": "affected",
              "version": "3.0.96"
            },
            {
              "status": "affected",
              "version": "3.0.97"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Eric-d (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the component PR Branch Name Interpolation. The manipulation leads to os command injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 4.6,
            "vectorString": "AV:N/AC:H/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "OS Command Injection",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "Command Injection",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-17T22:30:09.659Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-364392 | vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/364392"
        },
        {
          "name": "VDB-364392 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/364392/cti"
        },
        {
          "name": "Submit #811402 | vercel ai @ai-sdk/amazon-bedrock@3.0.97 OS Command Injection (CWE-78)",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/811402"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://gist.github.com/YLChen-007/870bd6966cd84703d91ce54dfea3bdd0"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-17T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-05-17T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-05-17T11:33:11.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-8767",
    "datePublished": "2026-05-17T22:30:09.659Z",
    "dateReserved": "2026-05-17T09:28:03.647Z",
    "dateUpdated": "2026-05-18T14:30:55.942Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-45773 (GCVE-0-2026-45773)

Vulnerability from cvelistv5 – Published: 2026-05-15 15:51 – Updated: 2026-05-15 16:45

Title

Turborepo: Login callback CSRF/session fixation

Summary

Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14, Turborepo's self-hosted login and SSO browser flows did not validate a CSRF state value on the localhost callback. While the CLI was waiting for authentication, a malicious web page could send a request to the local callback server with an attacker-controlled token. If accepted before the legitimate callback, the CLI could complete login with the wrong credentials. This affects users authenticating the turbo CLI against self-hosted remote cache/auth endpoints. Vercel-hosted login flows using device authorization are not affected. This vulnerability is fixed in 2.9.14.

Severity

5.1 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:H/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-15 16:44 UTC

CWE

CWE-352 - Cross-Site Request Forgery (CSRF)
CWE-384 - Session Fixation

Assigner

GitHub_M mitre root

References

1 reference

URL	Tags
https://github.com/vercel/turborepo/security/advi…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
vercel	turborepo	Affected: < 2.9.14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-45773",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T16:44:57.841414Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T16:45:06.076Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "turborepo",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.9.14"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14, Turborepo\u0027s self-hosted login and SSO browser flows did not validate a CSRF state value on the localhost callback. While the CLI was waiting for authentication, a malicious web page could send a request to the local callback server with an attacker-controlled token. If accepted before the legitimate callback, the CLI could complete login with the wrong credentials. This affects users authenticating the turbo CLI against self-hosted remote cache/auth endpoints. Vercel-hosted login flows using device authorization are not affected. This vulnerability is fixed in 2.9.14."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-352",
              "description": "CWE-352: Cross-Site Request Forgery (CSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-384",
              "description": "CWE-384: Session Fixation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-15T15:51:38.066Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/turborepo/security/advisories/GHSA-hcf7-66rw-9f5r",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/turborepo/security/advisories/GHSA-hcf7-66rw-9f5r"
        }
      ],
      "source": {
        "advisory": "GHSA-hcf7-66rw-9f5r",
        "discovery": "UNKNOWN"
      },
      "title": "Turborepo: Login callback CSRF/session fixation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-45773",
    "datePublished": "2026-05-15T15:51:38.066Z",
    "dateReserved": "2026-05-13T07:45:21.251Z",
    "dateUpdated": "2026-05-15T16:45:06.076Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-46508 (GCVE-0-2026-46508)

Vulnerability from cvelistv5 – Published: 2026-05-15 15:50 – Updated: 2026-05-15 18:05

Title

Turborepo: VSCode Extension command injection

Summary

Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo LSP VS Code extension could execute shell commands derived from workspace-controlled values. The extension used string-based command execution for Turborepo daemon commands and task runs. A malicious workspace could provide crafted values through workspace settings or task names in the repository's source code that were interpolated into shell commands. When the extension activated or when a user ran a task through the extension, those values could be interpreted by the user's shell, allowing arbitrary command execution with the privileges of the local VS Code process. This vulnerability is fixed in 2.9.14000.

Severity

8.4 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-15 18:01 UTC

CWE

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Assigner

GitHub_M mitre root

References

1 reference

URL	Tags
https://github.com/vercel/turborepo/security/advi…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
vercel	turborepo	Affected: < 2.9.14000

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-46508",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T18:01:21.787180Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T18:05:01.165Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "turborepo",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.9.14000"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo LSP VS Code extension could execute shell commands derived from workspace-controlled values. The extension used string-based command execution for Turborepo daemon commands and task runs. A malicious workspace could provide crafted values through workspace settings or task names in the repository\u0027s source code that were interpolated into shell commands. When the extension activated or when a user ran a task through the extension, those values could be interpreted by the user\u0027s shell, allowing arbitrary command execution with the privileges of the local VS Code process. This vulnerability is fixed in 2.9.14000."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77: Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-15T15:50:24.694Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/turborepo/security/advisories/GHSA-5xc8-49mv-x4mm",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/turborepo/security/advisories/GHSA-5xc8-49mv-x4mm"
        }
      ],
      "source": {
        "advisory": "GHSA-5xc8-49mv-x4mm",
        "discovery": "UNKNOWN"
      },
      "title": "Turborepo: VSCode Extension command injection"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-46508",
    "datePublished": "2026-05-15T15:50:24.694Z",
    "dateReserved": "2026-05-14T19:12:32.754Z",
    "dateUpdated": "2026-05-15T18:05:01.165Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-45772 (GCVE-0-2026-45772)

Vulnerability from cvelistv5 – Published: 2026-05-15 15:45 – Updated: 2026-05-15 17:54

Title

Turborepo: Unexpected local code execution during Yarn Berry detection

Summary

Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turborepo can be vulnerable to arbitrary code execution when run in untrusted repositories that contain malicious Yarn configuration. In affected versions, package manager detection executed yarn --version from the project directory, which could cause Yarn to load and execute a project-controlled yarnPath from .yarnrc.yml. An attacker who controls repository contents could cause code execution when a user or CI system runs affected turbo, @turbo/codemod, or @turbo/workspace conversion commands. This vulnerability is fixed in 2.9.14.

Severity

0 (None)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-15 17:53 UTC

CWE

CWE-426 - Untrusted Search Path

Assigner

GitHub_M mitre root

References

1 reference

URL	Tags
https://github.com/vercel/turborepo/security/advi…	x_refsource_CONFIRM

Impacted products

3 products

Vendor	Product	Version
vercel	turborepo	Affected: >= 1.1.0, < 2.9.14
@turbo	codemod	Affected: >= 2.3.4, < 2.9.14
@turbo	workspaces	Affected: >= 2.3.4, < 2.9.14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-45772",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T17:53:36.882524Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T17:54:06.401Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "turborepo",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.1.0, \u003c 2.9.14"
            }
          ]
        },
        {
          "product": "codemod",
          "vendor": "@turbo",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 2.3.4, \u003c 2.9.14"
            }
          ]
        },
        {
          "product": "workspaces",
          "vendor": "@turbo",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 2.3.4, \u003c 2.9.14"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turborepo can be vulnerable to arbitrary code execution when run in untrusted repositories that contain malicious Yarn configuration. In affected versions, package manager detection executed yarn --version from the project directory, which could cause Yarn to load and execute a project-controlled yarnPath from .yarnrc.yml. An attacker who controls repository contents could cause code execution when a user or CI system runs affected turbo, @turbo/codemod, or @turbo/workspace conversion commands. This vulnerability is fixed in 2.9.14."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 0,
            "baseSeverity": "NONE",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426: Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-15T15:47:12.753Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/turborepo/security/advisories/GHSA-3qcw-2rhx-2726",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/turborepo/security/advisories/GHSA-3qcw-2rhx-2726"
        }
      ],
      "source": {
        "advisory": "GHSA-3qcw-2rhx-2726",
        "discovery": "UNKNOWN"
      },
      "title": "Turborepo: Unexpected local code execution during Yarn Berry detection"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-45772",
    "datePublished": "2026-05-15T15:45:45.252Z",
    "dateReserved": "2026-05-13T07:45:21.251Z",
    "dateUpdated": "2026-05-15T17:54:06.401Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-45109 (GCVE-0-2026-45109)

Vulnerability from cvelistv5 – Published: 2026-05-13 17:11 – Updated: 2026-08-13 12:04

Title

Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes

Summary

Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing CVE-2026-44575 did not apply to middleware.ts with Turbopack. This vulnerability is fixed in 15.5.18 and 16.2.6.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-13 18:39 UTC

CWE

CWE-288 - Authentication Bypass Using an Alternate Path or Channel
CWE-358 - Improperly Implemented Security Check for Standard

Assigner

GitHub_M mitre root

References

8 references

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2026-45109	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2477190	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:40974	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37272	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34608	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54435	vendor-advisoryx_refsource_REDHAT

Impacted products

10 products

Vendor	Product	Version
vercel	next.js	Affected: >= 15.2.0, < 15.5.17 Affected: >= 16.0.0, < 16.2.6
Red Hat	Streams for Apache Kafka 2.9.4	cpe:/a:redhat:amq_streams:2.9::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1783958622 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 1783327185 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	streams for Apache Kafka 3	cpe:/a:redhat:amq_streams:3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-45109",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-13T18:39:20.946868Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-13T18:39:29.674Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:2.9::el9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "next",
            "product": "Streams for Apache Kafka 2.9.4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rekor-search-ui-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783958622",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rekor-search-ui-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783327185",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "thunderbird",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "thunderbird",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "thunderbird",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gaudi-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/disk-image-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:3"
            ],
            "defaultStatus": "affected",
            "packageName": "next",
            "product": "streams for Apache Kafka 3",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-13T17:11:07.275Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in Next.js. A remote unauthenticated attacker could exploit a bypass in a security fix when using middleware.ts with Turbopack. This vulnerability could lead to the disclosure of sensitive information."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-358",
                "description": "Improperly Implemented Security Check for Standard",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T12:04:29.810Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-45109"
          },
          {
            "name": "RHBZ#2477190",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477190"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45109.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40974"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37272"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34608"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54435"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:40974: Red Hat Trusted Artifact Signer 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37272: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34608: Streams for Apache Kafka 2.9.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-13T18:01:23.402Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-13T17:11:07.275Z",
            "value": "Made public."
          }
        ],
        "title": "next.js: Next.js: Information disclosure via security fix bypass in middleware with Turbopack",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 15.2.0, \u003c 15.5.17"
            },
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.2.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing CVE-2026-44575 did not apply to middleware.ts with Turbopack. This vulnerability is fixed in 15.5.18 and 16.2.6."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-288",
              "description": "CWE-288: Authentication Bypass Using an Alternate Path or Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T17:11:07.275Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6"
        }
      ],
      "source": {
        "advisory": "GHSA-26hh-7cqf-hhc6",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-45109",
    "datePublished": "2026-05-13T17:11:07.275Z",
    "dateReserved": "2026-05-08T19:27:26.699Z",
    "dateUpdated": "2026-08-13T12:04:29.810Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44582 (GCVE-0-2026-44582)

Vulnerability from cvelistv5 – Published: 2026-05-13 17:08 – Updated: 2026-05-14 18:23

Title

Next.js: Cache poisoning via collisions in React Server Component cache-busting

Summary

Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 and 16.2.5, React Server Component responses can be vulnerable to cache poisoning in deployments that rely on shared caches with insufficient response partitioning. In affected conditions, collisions in the _rsc cache-busting value can allow an attacker to poison cache entries so users receive the wrong response variant for a given URL. This vulnerability is fixed in 15.5.16 and 16.2.5.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-14 18:23 UTC

CWE

CWE-328 - Use of Weak Hash

Assigner

GitHub_M mitre root

References

1 reference

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 13.4.6, < 15.5.16 Affected: >= 16.0.0, < 16.2.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44582",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-14T18:23:45.992881Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-14T18:23:52.729Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 13.4.6, \u003c 15.5.16"
            },
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.2.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 and 16.2.5, React Server Component responses can be vulnerable to cache poisoning in deployments that rely on shared caches with insufficient response partitioning. In affected conditions, collisions in the _rsc cache-busting value can allow an attacker to poison cache entries so users receive the wrong response variant for a given URL. This vulnerability is fixed in 15.5.16 and 16.2.5."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-328",
              "description": "CWE-328: Use of Weak Hash",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T17:08:22.240Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949"
        }
      ],
      "source": {
        "advisory": "GHSA-vfv6-92ff-j949",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Cache poisoning via collisions in React Server Component cache-busting"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44582",
    "datePublished": "2026-05-13T17:08:22.240Z",
    "dateReserved": "2026-05-06T21:49:12.425Z",
    "dateUpdated": "2026-05-14T18:23:52.729Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44581 (GCVE-0-2026-44581)

Vulnerability from cvelistv5 – Published: 2026-05-13 17:07 – Updated: 2026-05-18 14:13

Title

Next.js: Cross-site scripting in App Router applications using CSP nonces

Summary

Next.js is a React framework for building full-stack web applications. From 13.4.0 to before 15.5.16 and 16.2.5, App Router applications that rely on CSP nonces can be vulnerable to stored cross-site scripting when deployed behind shared caches. In affected versions, malformed nonce values derived from request headers could be reflected into rendered HTML in an unsafe way, allowing an attacker to poison cached responses and cause script execution for later visitors. This vulnerability is fixed in 15.5.16 and 16.2.5.

Severity

4.7 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-18 14:12 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

GitHub_M mitre root

References

1 reference

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 13.4.0, < 15.5.16 Affected: >= 16.0.0, < 16.2.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44581",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-18T14:12:36.531340Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-18T14:13:33.462Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 13.4.0, \u003c 15.5.16"
            },
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.2.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. From 13.4.0 to before 15.5.16 and 16.2.5, App Router applications that rely on CSP nonces can be vulnerable to stored cross-site scripting when deployed behind shared caches. In affected versions, malformed nonce values derived from request headers could be reflected into rendered HTML in an unsafe way, allowing an attacker to poison cached responses and cause script execution for later visitors. This vulnerability is fixed in 15.5.16 and 16.2.5."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T17:07:15.845Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q"
        }
      ],
      "source": {
        "advisory": "GHSA-ffhc-5mcf-pf4q",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Cross-site scripting in App Router applications using CSP nonces"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44581",
    "datePublished": "2026-05-13T17:07:15.845Z",
    "dateReserved": "2026-05-06T21:49:12.424Z",
    "dateUpdated": "2026-05-18T14:13:33.462Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44580 (GCVE-0-2026-44580)

Vulnerability from cvelistv5 – Published: 2026-05-13 17:06 – Updated: 2026-05-13 18:28

Title

Next.js: Cross-site scripting in beforeInteractive scripts with untrusted input

Summary

Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be vulnerable to cross-site scripting. In affected versions, serialized script content was not escaped safely before being embedded into the document, which could allow attacker-controlled input to break out of the intended script context and execute arbitrary JavaScript in a visitor's browser. This vulnerability is fixed in 15.5.16 and 16.2.5.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-13 18:28 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

GitHub_M mitre root

References

1 reference

URL	Tags
https://github.com/vercel/next.js/security/adviso…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
vercel	next.js	Affected: >= 13.0.0, < 15.5.16 Affected: >= 16.0.0, < 16.2.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44580",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-13T18:28:00.345033Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-13T18:28:15.512Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "next.js",
          "vendor": "vercel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 15.5.16"
            },
            {
              "status": "affected",
              "version": "\u003e= 16.0.0, \u003c 16.2.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be vulnerable to cross-site scripting. In affected versions, serialized script content was not escaped safely before being embedded into the document, which could allow attacker-controlled input to break out of the intended script context and execute arbitrary JavaScript in a visitor\u0027s browser. This vulnerability is fixed in 15.5.16 and 16.2.5."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T17:06:05.772Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h"
        }
      ],
      "source": {
        "advisory": "GHSA-gx5p-jg67-6x7h",
        "discovery": "UNKNOWN"
      },
      "title": "Next.js: Cross-site scripting in beforeInteractive scripts with untrusted input"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44580",
    "datePublished": "2026-05-13T17:06:05.772Z",
    "dateReserved": "2026-05-06T21:49:12.424Z",
    "dateUpdated": "2026-05-13T18:28:15.512Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria

76 vulnerabilities by vercel

CVE-2026-94484 (GCVE-0-2026-94484)

CVE-2026-94485 (GCVE-0-2026-94485)

CVE-2026-94483 (GCVE-0-2026-94483)

CVE-2026-94543 (GCVE-0-2026-94543)

CVE-2026-94544 (GCVE-0-2026-94544)

CVE-2026-94486 (GCVE-0-2026-94486)

CVE-2026-103004 (GCVE-0-2026-103004)

CVE-2026-94545 (GCVE-0-2026-94545)

CVE-2026-75604 (GCVE-0-2026-75604)

CVE-2026-64649 (GCVE-0-2026-64649)

CVE-2026-64648 (GCVE-0-2026-64648)

CVE-2026-64647 (GCVE-0-2026-64647)

CVE-2026-64646 (GCVE-0-2026-64646)

CVE-2026-64644 (GCVE-0-2026-64644)

CVE-2026-64643 (GCVE-0-2026-64643)

CVE-2026-64642 (GCVE-0-2026-64642)

CVE-2026-64641 (GCVE-0-2026-64641)

CVE-2026-64645 (GCVE-0-2026-64645)

CVE-2026-64650 (GCVE-0-2026-64650)

CVE-2026-64651 (GCVE-0-2026-64651)

CVE-2026-8769 (GCVE-0-2026-8769)

CVE-2026-8768 (GCVE-0-2026-8768)

CVE-2026-8767 (GCVE-0-2026-8767)

CVE-2026-45773 (GCVE-0-2026-45773)

CVE-2026-46508 (GCVE-0-2026-46508)

CVE-2026-45772 (GCVE-0-2026-45772)

CVE-2026-45109 (GCVE-0-2026-45109)

CVE-2026-44582 (GCVE-0-2026-44582)

CVE-2026-44581 (GCVE-0-2026-44581)

CVE-2026-44580 (GCVE-0-2026-44580)