CVE-2017-16877
1 advisory.
npm/next CVE-2017-16877: high 7.5
Next.js Directory Traversal Vulnerability
Action: Upgrade next to 2.4.1 or later.
npm i next@2.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 2.4.1 | - |
Fixed versions
| 2.4.1 |
Sources
- osv: GHSA-3f5c-4qxj-vmpf
- https://nvd.nist.gov/vuln/detail/CVE-2017-16877
- https://github.com/vercel/next.js/commit/02fe7cf63f6265d73bdaf8bc50a4f2fb539dcd00
- https://github.com/zeit/next.js
- https://github.com/zeit/next.js/releases/tag/2.4.1
CVE-2017-16877 · published · modified · JSON