Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2220424
AlmaLinux
5946
Alpaquita
16105
Alpine
4618
Android
3677
Azure Linux
17673
BellSoft Hardened Containers
754
Bitnami
9325
Chainguard
1035748
CleanStart
4478
CRAN
14
crates.io
2745
Debian
68676
Echo
7558
GHC
3
GIT
108602
GitHub Actions
55
Go
9247
Hackage
33
Hex
364
Julia
1713
Linux
29975
Mageia
6233
Maven
7046
MinimOS
146748
npm
229023
NuGet
1869
opam
29
openEuler
8900
openSUSE
14498
OSS-Fuzz
4014
Packagist
7100
Pub
11
PyPI
25233
Red Hat
23413
Rocky Linux
4319
Root
19609
RubyGems
5326
SUSE
23390
SwiftURL
60
TuxCare
9675
Ubuntu
65799
VSCode
21
Wolfi
290799
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-vcvr-r3jv-pc5j
npm/next
Next.js: Remote Code Execution in next/og ImageResponse
15 hours ago
Fix available
Severity - 9.5 (Critical)
MAL-2026-16514
npm/@client-web-next/utils
Malicious code in @client-web-next/utils (npm)
22 Sep
No fix available
MAL-2026-16512
npm/@client-web-next/ui
Malicious code in @client-web-next/ui (npm)
22 Sep
No fix available
MAL-2026-16513
npm/@client-web-next/ui-business
Malicious code in @client-web-next/ui-business (npm)
22 Sep
No fix available
MAL-2026-16510
npm/@client-web-next/transfer-state
Malicious code in @client-web-next/transfer-state (npm)
22 Sep
No fix available
MAL-2026-16511
npm/@client-web-next/ua-parser
Malicious code in @client-web-next/ua-parser (npm)
22 Sep
No fix available
MAL-2026-16508
npm/@client-web-next/tarjeta-button
Malicious code in @client-web-next/tarjeta-button (npm)
22 Sep
No fix available
MAL-2026-16509
npm/@client-web-next/timer
Malicious code in @client-web-next/timer (npm)
22 Sep
No fix available
MAL-2026-16506
npm/@client-web-next/origination-microfront
Malicious code in @client-web-next/origination-microfront (npm)
22 Sep
No fix available
MAL-2026-16507
npm/@client-web-next/providers
Malicious code in @client-web-next/providers (npm)
22 Sep
No fix available
MAL-2026-16504
npm/@client-web-next/logger
Malicious code in @client-web-next/logger (npm)
22 Sep
No fix available
MAL-2026-16505
npm/@client-web-next/navigation-link
Malicious code in @client-web-next/navigation-link (npm)
22 Sep
No fix available
MAL-2026-16502
npm/@client-web-next/footer
Malicious code in @client-web-next/footer (npm)
22 Sep
No fix available
MAL-2026-16503
npm/@client-web-next/icons
Malicious code in @client-web-next/icons (npm)
22 Sep
No fix available
MAL-2026-16501
npm/@client-web-next/feature-flags
Malicious code in @client-web-next/feature-flags (npm)
22 Sep
No fix available
MAL-2026-16499
npm/@client-web-next/env-util
Malicious code in @client-web-next/env-util (npm)
22 Sep
No fix available
Load more...
npm - OSV