Vulnerabilities

 2 via 2 paths

Dependencies

 178

Source

 GitHub

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications
Severity
  • 1
  • 1
Status
  • 2
  • 0
  • 0

critical severity
new

Remote Code Execution (RCE)

  • Vulnerable module: next
  • Introduced through: next@16.3.8

Detailed paths

  • Introduced through: dashboard@lowsky/gh-dashboard-relay › next@16.3.8
    Remediation: Upgrade to next@16.4.1.

Overview

next is a react framework.

Affected versions of this package are vulnerable to Remote Code Execution (RCE) in applications using App router with Cache Component.

Remediation

Upgrade next to version 16.4.1 or higher.

References

Remote Code Execution (RCE) vulnerability report

high severity
new

Excessive Iteration

  • Vulnerable module: next
  • Introduced through: next@16.3.8

Detailed paths

  • Introduced through: dashboard@lowsky/gh-dashboard-relay › next@16.3.8
    Remediation: Upgrade to next@16.4.1.

Overview

next is a react framework.

Affected versions of this package are vulnerable to Excessive Iteration via a crafted request using App Router with at least one Server Action which can lead to excessive CPU usage blocking processing of further requests in the same process.

Remediation

Upgrade next to version 15.5.28, 16.4.1 or higher.

References

Excessive Iteration vulnerability report