https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:19:34 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-16415 bdu:2025-16415 https://cve.radiocsirt.org/vuln/bdu:2025-16415 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0896 certfr-2025-avi-0896 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0896 https://cve.radiocsirt.org/vuln/cleanstart-2026-il36032 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: jitsucom-jitsu</p> <p>Multiple security vulnerabilities affect the jitsucom-jitsu package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: jitsucom-jitsu</p> <p>Multiple security vulnerabilities affect the jitsucom-jitsu package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-il36032 https://cve.radiocsirt.org/vuln/euvd-2026-246689 EUVD-2026-246689 https://cve.radiocsirt.org/vuln/euvd-2026-246689 https://cve.radiocsirt.org/vuln/fkie_cve-2025-49005 <p>Next.js is a React framework for building full-stack web applications. In Next.js App Router from 15.3.0 to before 15.3.3 and Vercel CLI from 41.4.1 to 42.2.0, a cache poisoning vulnerability was found. The issue allowed page requests for HTML content to return a React Server Component (RSC) payload instead under certain conditions. When deployed to Vercel, this would only impact the browser cache, and would not lead to the CDN being poisoned. When self-hosted and deployed externally, this could lead to cache poisoning if the CDN does not properly distinguish between RSC / HTML in the cache keys. This issue has been resolved in Next.js 15.3.3.</p> <p>Next.js is a React framework for building full-stack web applications. In Next.js App Router from 15.3.0 to before 15.3.3 and Vercel CLI from 41.4.1 to 42.2.0, a cache poisoning vulnerability was found. The issue allowed page requests for HTML content to return a React Server Component (RSC) payload instead under certain conditions. When deployed to Vercel, this would only impact the browser cache, and would not lead to the CDN being poisoned. When self-hosted and deployed externally, this could lead to cache poisoning if the CDN does not properly distinguish between RSC / HTML in the cache keys. This issue has been resolved in Next.js 15.3.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-49005 https://cve.radiocsirt.org/vuln/ghsa-r2fc-ccr8-96c4 <p><strong>Affected:</strong> npm: next</p> <p>### Summary</p> <p>A cache poisoning issue in **Next.js App Router &gt;=15.3.0 and &lt; 15.3.3** may have allowed RSC payloads to be cached and served in place of HTML, under specific conditions involving middleware and redirects. This issue has been fixed in **Next.js 15.3.3**.</p> <p>Users on affected versions should **upgrade immediately** and **redeploy** to ensure proper caching behavior.</p> <p>More details: [CVE-2025-49005](https://vercel.com/changelog/cve-2025-49005)</p> <p><strong>Affected:</strong> npm: next</p> <p>### Summary</p> <p>A cache poisoning issue in **Next.js App Router &gt;=15.3.0 and &lt; 15.3.3** may have allowed RSC payloads to be cached and served in place of HTML, under specific conditions involving middleware and redirects. This issue has been fixed in **Next.js 15.3.3**.</p> <p>Users on affected versions should **upgrade immediately** and **redeploy** to ensure proper caching behavior.</p> <p>More details: [CVE-2025-49005](https://vercel.com/changelog/cve-2025-49005)</p> https://cve.radiocsirt.org/vuln/ghsa-r2fc-ccr8-96c4 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1456 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Vercel Next.js ausnutzen, um falsche Informationen darzustellen oder einen Denial of Service Zustand zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Vercel Next.js ausnutzen, um falsche Informationen darzustellen oder einen Denial of Service Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1456