Vulnerabilities > Vercel > Next JS > 9.5.3

DATE CVE VULNERABILITY TITLE RISK
2023-10-22 CVE-2023-46298 Unspecified vulnerability in Vercel Next.Js
Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN.
network
low complexity
vercel
7.5
2020-10-08 CVE-2020-15242 Open Redirect vulnerability in Vercel Next.Js
Next.js versions >=9.5.0 and <9.5.4 are vulnerable to an Open Redirect.
network
vercel CWE-601
5.8