next
Version: 16.4.1The React Framework
What is "next"?
The React Framework
How to use this package
Quick install
Installs the package into the current environment for this session. Use --build or --runtime to persist it as a build-time or runtime dependency.
min add nextDeclare as a task dependency in minimal.toml
Listing the package under tasks.<name>.packages makes it available inside that task’s sandbox.
[tasks.dev]
packages = ["next"]Build-time vs runtime
Choose build-time for tools needed during compilation, runtime for dynamic libraries loaded at runtime.
min add --build next
min add --runtime nextDependencies (13)
Dependency changes
Loading diff…
Could not load the dependency diff for one of the selected versions. Try again.
No dependency changes
The two selected versions have identical direct dependencies.
| Name | Version | Kind |
|---|
No dependants
No other packages in the registry depend on this one.
- Lines:+52Deps:13(+3)Released:
- Lines:+63Deps:10Released:
- Lines:+2 / -2Deps:10Released:
- Lines:+10 / -1Deps:10Released:
- Lines:+2 / -2Deps:10Released:
- Lines:+35 / -13Deps:10(+1 / -1)Released:
- Lines:+19 / -7Deps:10Released:
- Lines:+2 / -2Deps:10Released:
- Lines:+10Deps:10Released:
- Lines:+35 / -4Deps:10Released:
- Lines:+23Deps:10(+1)Released:
- Lines:+3 / -2Deps:9Released:
Showing 12 advisories, 5 of which are transitive via next's dependencies
No advisories match the current filters.
| Critical (0) | ||||||
| Status | IDs | Package | Severity | |||
|---|---|---|---|---|---|---|
| High (4) | ||||||
| Status | IDs | Package | Severity | |||
Under investigation | sqlite | High | ||||
SummarySQLite CLI through 3.54.1 Command Injection via .recover Output Affected ranges3.53.4 – 3.54.1 References
| ||||||
Affected: 1.3.2 | zlib | High | ||||
Summaryzlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate Affected ranges1.3.2 References
| ||||||
Under investigation | zlib | High | ||||
Summaryzlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write Affected ranges1.3 – 1.3.2 References
| ||||||
Under investigation | pcre2 | High | ||||
SummaryHeap-buffer-overflow in pcre2_compile_32 Affected ranges10.47 – 10.49 References | ||||||
| Medium (1) | ||||||
| Status | IDs | Package | Severity | |||
Under investigation | libpng | Medium: 5.4 | ||||
SummaryLIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body Affected ranges1.6.53 – 1.6.59 CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L References
| ||||||
| Low (0) | ||||||
| Status | IDs | Package | Severity | |||
| Unknown (7) | ||||||
| Status | IDs | Package | Severity | |||
Under investigation | next | Unknown | ||||
SummaryHttpOnly cookie exposure through internal response header on Next.js Edge runtime routes Affected ranges16.3.8 – 16.4.1 | ||||||
Under investigation | next | Unknown | ||||
SummarySVG rejection bypass in Next.js image optimization Affected ranges16.3.8 – 16.4.1 | ||||||
Under investigation | next | Unknown | ||||
SummaryCross-client response injection and disclosure in self-hosted Next.js applications forwarding fetched responses Affected ranges16.3.8 – 16.4.1 | ||||||
Under investigation | next | Unknown | ||||
SummaryCross-user cache disclosure and poisoning in Next.js use cache with binary arguments Affected ranges16.3.8 – 16.4.1 | ||||||
Affected: 16.4.1 | next | Unknown | ||||
SummaryCache poisoning of shared fallback shells in Cache Components via request-supplied placeholder route params Affected ranges16.4.0 – 16.4.1 | ||||||
Under investigation | next | Unknown | ||||
SummaryCache leak across root param values in nested 'use cache' functions via delayed inner stream metadata Affected ranges16.3.8 – 16.4.1 | ||||||
Under investigation | next | Unknown | ||||
SummaryInformation disclosure across root params in Next.js when a 'use cache' function is called through unstable_cache() Affected ranges16.3.8 – 16.4.1 | ||||||
Build provenance
Loading provenance
Build provenance
Sign in to see provenance at this commit.
Build provenance
Could not load provenance.
For the signed record of what the build used, see the Provenance tab.
83 components
No components match your filter.