Threats Tagged 'ghsa-6gpp-xcg3-4w24'

1 threat

Threats Tagged 'ghsa-6gpp-xcg3-4w24'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.3	EPSS 0.6%	CVE-2026-64642next.js · Improper Authorization High8.3EPSS 0.6%2026-07-23GCVE DatabaseCVE-2026-64642 Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. This issue has been fixed in version 16.2.11. EPSS 0.6%Vulnerability vercel #ghsa-6gpp-xcg3-4w24 #npm #cwe-285	GCVE Database	2026-07-23

Showing 1–1 of 1 result