npm/next CVE-2018-6184: high 7.5, EPSS 9.06%

Directory traversal vulnerability in Next.js

Action: Upgrade next to 4.2.3 or later.

npm i next@4.2.3

Affected

Fixed versions

Sources

• osv: GHSA-m34x-wgrh-g897
• https://nvd.nist.gov/vuln/detail/CVE-2018-6184
• https://github.com/advisories/GHSA-m34x-wgrh-g897
• https://github.com/vercel/next.js/releases/tag/4.2.3
• https://github.com/zeit/next.js

CVE-2018-6184 · published 2018-01-24T19:38:52Z · modified 2023-11-08T04:00:21.025418Z · JSON