Vulnerabilities (CVE)

Filtered by vendor Zeit Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-16877 1 Zeit 1 Next.js 2023-12-07 5.0 MEDIUM 7.5 HIGH
ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.
CVE-2019-5415 1 Zeit 1 Serve 2020-10-19 5.0 MEDIUM 7.5 HIGH
A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to.
CVE-2019-5417 1 Zeit 1 Serve 2019-03-25 5.0 MEDIUM 7.5 HIGH
A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server.
CVE-2018-6184 1 Zeit 1 Next.js 2018-02-12 5.0 MEDIUM 7.5 HIGH
ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /_next request namespace.