{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"12.2.3"}],"component":"nextjs","cve_ids":["CVE-2022-36046"],"ecosystem":"PyPI","epss":0.0116,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wff4-fpwg-qqv3","id":"tcs_01M5KGHXPCQD92S4TSTFAZS75R","modified_at":"2026-07-13T07:15:38.249421984Z","published_at":"2022-08-31T19:15:08.737Z","references":["https://osv.dev/vulnerability/PYSEC-2022-43188","https://github.com/vercel/next.js/releases/tag/v12.2.4","https://github.com/vercel/next.js/security/advisories/GHSA-wff4-fpwg-qqv3"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"PYSEC-2022-43188","url":"https://osv.dev/vulnerability/PYSEC-2022-43188"}],"summary":"Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1"}