Vulnerability Database - OSV

GHSA-9g9p-9gw9-jx7f

npm/next

Next.js self-hosted applications vulnerable to DoS via Image Optimizer remotePatterns configuration 27 Jan

Fix available
Severity - 5.9 (Medium)

CLEANSTART-2026-TD56649

CleanStart/jitsucom-jitsu

Security fix for GHSA-9g9p-9gw9-jx7f applied in: jitsucom-jitsu 2.11.0-r2 18 Sep

Fix available
Severity - 5.9 (Medium)

MINI-cgrv-pfmx-27vx

MinimOS/trigger-dev

See record for full details 02 Jul

Fix available

CGA-w979-cjc5-rv7r

Chainguard/cadence-web

See record for full details 06 May

No fix available
Severity - 5.9 (Medium)

CGA-r8x7-jhjp-vxmv

Chainguard/cadence-web

See record for full details 06 May

No fix available
Severity - 5.9 (Medium)

CGA-h9fx-3r46-24rq

Chainguard/langfuse-fips-3

See record for full details 29 Jan

Fix available
Severity - 5.9 (Medium)

CGA-vj9r-62cx-69xp

Chainguard/langfuse-2

See record for full details 29 Jan

Fix available
Severity - 5.9 (Medium)

CGA-3m85-g76f-cv3v

Chainguard/langfuse-3
Wolfi/langfuse-3

See record for full details 29 Jan

Fix available
Severity - 5.9 (Medium)

CGA-q8w9-8wj3-jp5f

Chainguard/langfuse-2

See record for full details 29 Jan

Fix available
Severity - 5.9 (Medium)

CGA-m666-vwfj-v8rw

Chainguard/langfuse-fips-3

See record for full details 29 Jan

Fix available
Severity - 5.9 (Medium)

CGA-79w8-jqjh-89cr

Chainguard/langfuse-fips-2

See record for full details 29 Jan

Fix available
Severity - 5.9 (Medium)

CGA-pw97-fj5v-32gf

Chainguard/langfuse-3
Wolfi/langfuse-3

See record for full details 29 Jan

Fix available
Severity - 5.9 (Medium)

CGA-g4w2-cxjc-8w8w

Chainguard/langfuse-fips-2

See record for full details 29 Jan

Fix available
Severity - 5.9 (Medium)

CVE-2025-59471

github.com/vercel/next.js

A denial of service vulnerability exists in self-hosted Next.js applications... 26 Jan

Fix available
Severity - 5.9 (Medium)