All vulnerabilities

npm

CVE-2020-15242

Open Redirect in Next.js versions

Severity
Medium 4.7
Published
8 Oct 2020
Last changed
10 Sept 2026
Added to UpHeron
14 Oct 2026
Fixed in
9.5.4
Also known as
GHSA-x56p-c8cg-q435
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
Next.jsnpm · osv:npm:next
  • From 9.5.0 before 9.5.4

References