Next.js Framework 13.x < 15.5.21 / 16.x < 16.2.11 多种漏洞

版本 1.2

Sep 4, 2026, 12:58 PM

CVSS metrics ("Cvssv4 score" set to 6.3. "Cvssv4 threat score" set to 6.3. "Cvssv4 threat vector" set to "CVSS:4.0/E:U". "Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N")
CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C")
Exploit attributes ("Exploit available" set to "False". "Exploitability ease" set to "No known exploits are available")
Plugin metadata (Add IAVM info)