Skip to content

Latest commit

 

History

History
28 lines (22 loc) · 832 Bytes

nextjs-library-with-known-vulnerabilities.md

File metadata and controls

28 lines (22 loc) · 832 Bytes
name severity cvss-score cvss-vector cwe-id cwe-name compliance
Next.js library with known vulnerabilities
low
4.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CWE-1035
OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
HIPAA ISO 27001 owasp10 pci PCI v4.0
164.306(a)
A.8.9
A5, A6
6.2
pci4-6.2.4, pci4-6.3.3

The application uses an outdated version of the Next.js library, which has known vulnerabilities.

How to fix

{% tabs nextjs-library-with-known-vulnerabilities %} {% tab nextjs-library-with-known-vulnerabilities generic %} To fix this issue, you just need to update Next.js to the latest version available on their website.

Do not forget to update all the Next.js files you have on the server. {% endtab %}

{% endtabs %}