Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-10449
  • npm/auth-gen-next
 Malicious code in auth-gen-next (npm) 4 days ago
  • No fix available
MAL-2026-10211
  • npm/react-next-vite
 Malicious code in react-next-vite (npm) 5 days ago
  • No fix available
MAL-2026-10180
  • npm/auth-next-gen
 Malicious code in auth-next-gen (npm) 10 Jul
  • No fix available
MAL-2026-7013
  • npm/next-locomotive-init
 Malicious code in next-locomotive-init (npm) 08 Jul
  • No fix available
MAL-2026-7367
  • npm/react-tiny-popover-next
 Malicious code in react-tiny-popover-next (npm) 07 Jul
  • No fix available
MAL-2026-7365
  • npm/react-datepicker-next
 Malicious code in react-datepicker-next (npm) 07 Jul
  • No fix available
MAL-2026-7327
  • npm/next-runtimejs
 Malicious code in next-runtimejs (npm) 07 Jul
  • No fix available
MAL-2026-6855
  • npm/next-bignumber.js
 Malicious code in next-bignumber.js (npm) 06 Jul
  • No fix available
MAL-2026-6825
  • npm/react-next-dom
 Malicious code in react-next-dom (npm) 06 Jul
  • No fix available
MAL-2026-6709
  • npm/vega-lite-next
 Malicious code in vega-lite-next (npm) 01 Jul
  • No fix available
MAL-2026-5871
  • npm/lucide-next
 Malicious code in lucide-next (npm) 16 Jun
  • No fix available
MAL-2026-5076
  • npm/private-next-instrumentation-client
 Malicious code in private-next-instrumentation-client (npm) 29 May
  • No fix available
MAL-2026-4193
  • npm/private-next-pages
 Malicious code in private-next-pages (npm) 20 May
  • No fix available
MAL-2026-3749
  • npm/@webapp-next/store
 Malicious code in @webapp-next/store (npm) 14 May
  • No fix available
GHSA-26hh-7cqf-hhc6
  • npm/next
 Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up 11 May
  • Fix available
  • Severity - 7.5 (High)
GHSA-3g8h-86w9-wvmq
  • npm/next
 Next.js's Middleware / Proxy redirects can be cache-poisoned 11 May
  • Fix available
  • Severity - 3.7 (Low)
Load more...