High
CVE-2022-40277
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 543
Reset filters
Medium
CVE-2022-39263
Upstash Adapter missing token verification
Medium
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
Low
ghsa-56x4-j7p9-fcf9
Command Injection in moment-timezone
Critical
CVE-2022-36010
React Editable Json Tree vulnerable to arbitrary code execution via function parsing
Low
CVE-2022-31186
next-auth before v4.10.2 and v3.29.9 leaks excessive information into log
Critical
CVE-2022-35924
NextAuth.js before 4.10.3 and 3.29.10 sending verification requests (magic link) to unwanted emails
High
CVE-2022-31127
Improper handling of email input
High
CVE-2022-31093
Improper Handling of `callbackUrl` parameter in next-auth
Medium
CVE-2021-4231
Angular vulnerable to Cross-site Scripting
Medium
CVE-2022-29229
Missing Cryptographic Step in cassproject
Medium
CVE-2022-29214
URL Redirection to Untrusted Site ('Open Redirect') in next-auth
High
CVE-2018-7408
Incorrect Permission Assignment for Critical Resource in NPM
Medium
CVE-2022-24858
NextAuth.js default redirect callback vulnerable to open redirects
Medium
CVE-2022-23646
Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0
Medium
CVE-2022-21721
Denial of Service Vulnerability in next.js
High
CVE-2022-0087
Reflected cross-site scripting (XSS) vulnerability
Medium
CVE-2021-43812
Open redirect in @auth0/nextjs-auth0
High
CVE-2021-43803
Unexpected server crash in Next.js.
Medium
CVE-2021-41183
XSS in `*Text` options of the Datepicker widget in jquery-ui
High
CVE-2021-41117
Insecure random number generation in keypair
High
CVE-2021-39178
XSS in Image Optimization API for Next.js
Medium
CVE-2021-37699
Open Redirect in Next.js
Low
ghsa-xh2p-7p87-fhgh
Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.