CVE-2018-18282
1 advisory.
npm/next CVE-2018-18282: medium 6.1
Next.js has cross site scripting (XSS) vulnerability via the 404 or 500 /_error page
Action: Upgrade next to 7.0.2 or later.
npm i next@7.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.0.2 | - |
Fixed versions
| 7.0.2 |
Sources
- osv: GHSA-qw96-mm2g-c8m7
- https://nvd.nist.gov/vuln/detail/CVE-2018-18282
- https://github.com/advisories/GHSA-qw96-mm2g-c8m7
- https://github.com/zeit/next.js
- https://github.com/zeit/next.js/releases/tag/7.0.2
CVE-2018-18282 · published · modified · JSON