npm
CVE-2020-15242
Open Redirect in Next.js versions
- Severity
- Medium 4.7
- Published
- 8 Oct 2020
- Last changed
- 10 Sept 2026
- Added to UpHeron
- 14 Oct 2026
- Fixed in
- 9.5.4
- Also known as
- GHSA-x56p-c8cg-q435
- Sources
- OSV.dev and GitHub
Affected software
| Software | Affected versions |
|---|---|
Next.jsnpm · osv:npm:next |
|
References
- CVE.org https://www.cve.org/CVERecord?id=CVE-2020-15242
- GitHub Advisory Database https://github.com/advisories/GHSA-x56p-c8cg-q435