https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 20:34:20 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-22200 cnvd-2020-22200 https://cve.radiocsirt.org/vuln/cnvd-2020-22200 https://cve.radiocsirt.org/vuln/euvd-2026-36490 EUVD-2026-36490 https://cve.radiocsirt.org/vuln/euvd-2026-36490 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5284 <p>Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access files in the dist directory (.next). This does not affect files outside of the dist directory (.next). In general, the dist directory only holds build assets unless your application intentionally stores other assets under this directory. This issue is fixed in version 9.3.2.</p> <p>Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access files in the dist directory (.next). This does not affect files outside of the dist directory (.next). In general, the dist directory only holds build assets unless your application intentionally stores other assets under this directory. This issue is fixed in version 9.3.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-5284 https://cve.radiocsirt.org/vuln/ghsa-fq77-7p7r-83rj <p><strong>Affected:</strong> npm: next</p> <p>### Impact</p> <p>- **Not affected**: Deployments on ZEIT Now v2 ([https://zeit.co](https://zeit.co/)) are not affected - **Not affected**: Deployments using the `serverless` target - **Not affected**: Deployments using `next export` - **Affected**: Users of Next.js below 9.3.2</p> <p>We recommend everyone to upgrade regardless of whether you can reproduce the issue or not.</p> <p>### Patches</p> <p>https://github.com/zeit/next.js/releases/tag/v9.3.2</p> <p>### References</p> <p>https://github.com/zeit/next.js/releases/tag/v9.3.2</p> <p><strong>Affected:</strong> npm: next</p> <p>### Impact</p> <p>- **Not affected**: Deployments on ZEIT Now v2 ([https://zeit.co](https://zeit.co/)) are not affected - **Not affected**: Deployments using the `serverless` target - **Not affected**: Deployments using `next export` - **Affected**: Users of Next.js below 9.3.2</p> <p>We recommend everyone to upgrade regardless of whether you can reproduce the issue or not.</p> <p>### Patches</p> <p>https://github.com/zeit/next.js/releases/tag/v9.3.2</p> <p>### References</p> <p>https://github.com/zeit/next.js/releases/tag/v9.3.2</p> https://cve.radiocsirt.org/vuln/ghsa-fq77-7p7r-83rj https://cve.radiocsirt.org/vuln/gsd-2020-5284 gsd-2020-5284 https://cve.radiocsirt.org/vuln/gsd-2020-5284