Nextjs

2 CVEs product

Monthly

CVE-2025-6087 CRITICAL PATCH Act Now

A remote code execution vulnerability (CVSS 9.1). Critical severity with potential for significant impact on affected systems.

SSRF Nextjs Node.js Information Disclosure Opennext For Cloudflare +1

NVD GitHub

CVSS 3.1

9.1

EPSS

0.4%

CVE-2025-48947 HIGH PATCH This Week

A security vulnerability in Next.js applications. In Auth0 Next.js SDK (CVSS 7.7). High severity vulnerability requiring prompt remediation.

Nextjs Node.js Information Disclosure Authentication Bypass

NVD GitHub

CVSS 4.0

7.7

EPSS

0.1%

CVE-2025-6087

EPSS 0% CVSS 9.1

CRITICAL PATCH Act Now

A remote code execution vulnerability (CVSS 9.1). Critical severity with potential for significant impact on affected systems.

SSRF Nextjs Node.js +3

NVD GitHub

CVE-2025-48947

EPSS 0% CVSS 7.7

HIGH PATCH This Week

A security vulnerability in Next.js applications. In Auth0 Next.js SDK (CVSS 7.7). High severity vulnerability requiring prompt remediation.

Nextjs Node.js Information Disclosure +1

NVD GitHub