Threats Tagged 'ghsa-cjq9-62q9-8jv4'

1 threat

Threats Tagged 'ghsa-cjq9-62q9-8jv4'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.3	EPSS 0.2%	CVE-2026-94483next.js · Server-Side Request Forgery (SSRF) High8.3EPSS 0.2%2026-10-02CVE Database V5CVE-2026-94483 A Server-Side Request Forgery (SSRF) vulnerability exists in Next.js versions 16.0.0 through 16.3.7 in the Image Optimization feature when using images.remotePatterns. This allows attacker-controlled DNS resolution to bypass allow-list checks and fetch images from private IP addresses. Applications not using images.remotePatterns are not affected. The issue is fixed in version 16.3.8. EPSS 0.2%Vulnerability vercel #cwe-918 #ghsa-cjq9-62q9-8jv4 #npm	CVE Database V5	2026-10-02

Showing 1–1 of 1 result