Vulnerabilities > Vercel > Next JS > 10.1.1

DATE CVE VULNERABILITY TITLE RISK
2023-10-22 CVE-2023-46298 Unspecified vulnerability in Vercel Next.Js
Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN.
network
low complexity
vercel
7.5
2022-02-17 CVE-2022-23646 User Interface (UI) Misrepresentation of Critical Information vulnerability in Vercel Next.Js
Next.js is a React framework.
network
vercel CWE-451
4.3
2021-08-31 CVE-2021-39178 Cross-site Scripting vulnerability in Vercel Next.Js
Next.js is a React framework.
network
vercel CWE-79
4.3