All vulnerabilities

npm

CVE-2020-5284

Directory Traversal in Next.js

Severity
Medium 4.4
Published
30 Mar 2020
Last changed
10 Sept 2026
Added to UpHeron
14 Oct 2026
Fixed in
9.3.2
Also known as
GHSA-fq77-7p7r-83rj
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
Next.jsnpm · osv:npm:next
  • From 0.9.9 before 9.3.2

References