GHSA-fq77-7p7r-83rjMediumCVSS 4.4

Directory Traversal in Next.js

Published
March 30, 2020
Last Modified
September 26, 2025

🔗 CVE IDs covered (1)

CVE-2020-5284 →

📋 Description

Impact

  • Not affected: Deployments on ZEIT Now v2 (https://zeit.co) are not affected
  • Not affected: Deployments using the serverless target
  • Not affected: Deployments using next export
  • Affected: Users of Next.js below 9.3.2

We recommend everyone to upgrade regardless of whether you can reproduce the issue or not.

Patches

https://github.com/zeit/next.js/releases/tag/v9.3.2

References

https://github.com/zeit/next.js/releases/tag/v9.3.2

🎯 Affected products1

  • npm/next:>= 0.9.9, < 9.3.2

🔗 References (5)