| Package | Affected versions | Patched versions |
|---|---|---|
| next.js | < 2.4.1 | 2.4.1 |
| next | ≥ 1.0.0, < 2.4.1 | 2.4.1 |
Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free