Security

Report a vulnerability

SECURITY.md

Reporting Security Issues

If you believe you have found a security vulnerability, we encourage you to let us know right away.

We will investigate all legitimate reports and do our best to quickly fix the problem.

Please report any vulnerabilities in our open source repositories to responsible.disclosure@vercel.com.

x-middleware-subrequest-id may be leaked to external hosts
GHSA-223j-4rm8-mrmf published Apr 2, 2025 by aaronbrown-vercel

Low
Race condition to Cache Poisoning
GHSA-qpjv-v59x-3qc4 published May 14, 2025 by aaronbrown-vercel

Low
Authorization Bypass in Next.js Middleware
GHSA-f82v-jwr5-mffw published Mar 21, 2025 by jackwilson323

Critical
Information exposure in Next.js dev server due to lack of origin verification
GHSA-3h52-269p-cp9r published May 28, 2025 by aaronbrown-vercel

Low
Denial of Service (DoS) with Server Actions
GHSA-7m27-7ghc-44w9 published Jan 3, 2025 by ztanner

Moderate
Authorization bypass in Next.js
GHSA-7gfc-8cq8-jh5f published Dec 17, 2024 by jackwilson323

High
Denial of Service condition in Next.js image optimization
GHSA-g77x-44xx-532m published Oct 14, 2024 by jackwilson323

Moderate
Cache Poisoning
GHSA-gp8f-8m3g-qvj9 published Sep 17, 2024 by ijjk

High
Denial of Service (DoS) condition
GHSA-fq54-2j52-jc42 published Jul 10, 2024 by jackwilson323

High
HTTP Request Smuggling
GHSA-77r5-gw3j-2mpf published May 9, 2024 by jackwilson323

High

Learn more about advisories related to vercel/next.js in the GitHub Advisory Database

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.

Alternative Proxies:

Alternative Proxy