Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-03-30	CVE-2020-5284	Path Traversal vulnerability in Zeit Next.Js Next.js versions before 9.3.2 have a directory traversal vulnerability. network low complexity zeit CWE-22	4.3
2018-10-12	CVE-2018-18282	Cross-site Scripting vulnerability in Zeit Next.Js 7.0.0/7.0.1 Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /_error page. network low complexity zeit CWE-79	6.1

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.