next@16.3.8
The React Framework
latest version
16.4.2
latest non vulnerable version
first published
15 years ago
latest version published
5 days ago
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the next package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
next is a react framework. Affected versions of this package are vulnerable to Excessive Iteration via a crafted request using App Router with at least one Server Action which can lead to excessive CPU usage blocking processing of further requests in the same process. How to fix Excessive Iteration? Upgrade | >=13.0.0 <15.5.28>=16.0.0 <16.4.1 |
next is a react framework. Affected versions of this package are vulnerable to Remote Code Execution (RCE) in applications using App router with Cache Component. How to fix Remote Code Execution (RCE)? Upgrade | >=16.0.0 <16.4.1 |