Vulnerability Database - OSV

GHSA-h25m-26qc-wcjf

npm/next

Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components 28 Jan

Fix available
Severity - 7.5 (High)

ROOT-APP-NPM-GHSA-h25m-26qc-wcjf

Root:npm/@rootio/next
Root:npm/next

GHSA-h25m-26qc-wcjf in next - Patched by Root 22 Sep

Fix available

CLEANSTART-2026-HJ90952

CleanStart/jitsucom-jitsu

Security fix for ghsa-h25m-26qc-wcjf applied in: jitsucom-jitsu 2.11.0-r2 18 Sep

Fix available

CLSA-2026-1786710099

TuxCare:npm/@next/bundle-analyzer
TuxCare:npm/@next/codemod
TuxCare:npm/@next/env
TuxCare:npm/@next/eslint-plugin-next
TuxCare:npm/@next/font
... 10 more

TuxCare security update for 15 packages (9 CVEs) 14 Aug

Fix available

CLSA-2026-1786531569

TuxCare:npm/@next/bundle-analyzer
TuxCare:npm/@next/codemod
TuxCare:npm/@next/env
TuxCare:npm/@next/eslint-plugin-next
TuxCare:npm/@next/font
... 9 more

TuxCare security update for 14 packages (9 CVEs) 12 Aug

Fix available

MINI-44xr-9h37-66cj

MinimOS/trigger-dev

See record for full details 02 Jul

No fix available

CGA-87jc-xh32-hr4q

Chainguard/cadence-web

See record for full details 06 May

No fix available
Severity - 7.5 (High)

CGA-w82w-43ww-vw2x

Chainguard/cadence-web

See record for full details 06 May

No fix available
Severity - 7.5 (High)

CGA-jq83-hfwq-4v2g

Chainguard/langfuse-fips-3

See record for full details 29 Jan

Fix available
Severity - 7.5 (High)

CGA-8h88-qxcw-9q27

Chainguard/langfuse-2

See record for full details 29 Jan

Fix available
Severity - 7.5 (High)

CGA-58q8-x53p-8hq6

Chainguard/langfuse-3
Wolfi/langfuse-3

See record for full details 29 Jan

Fix available
Severity - 7.5 (High)

CGA-j733-mp5p-x9m4

Chainguard/langfuse-2

See record for full details 29 Jan

Fix available
Severity - 7.5 (High)

CGA-q524-cj74-5whh

Chainguard/langfuse-fips-3

See record for full details 29 Jan

Fix available
Severity - 7.5 (High)

CGA-77g9-pxj5-5vqh

Chainguard/langfuse-fips-2

See record for full details 29 Jan

Fix available
Severity - 7.5 (High)

CGA-r49v-7fm2-g7m6

Chainguard/langfuse-3
Wolfi/langfuse-3

See record for full details 29 Jan

Fix available
Severity - 7.5 (High)

CGA-6m7q-vrp9-c4v4

Chainguard/langfuse-fips-2

See record for full details 29 Jan

Fix available
Severity - 7.5 (High)