Next.js

Next.js may leak x-middleware-subrequest-id to external hosts

Unexpected server crash in Next.js.

Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes

Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n

Next.js has information disclosure in development server's Model Context Protocol endpoint

Next.js Directory Traversal Vulnerability

Next.js's Middleware / Proxy redirects can be cache-poisoned

Information exposure in Next.js dev server due to lack of origin verification