← Back

Next.js

next.js

Vendor: Kanopi • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-13984
1Kanopi
1Next.js
Jun 17, 2026
Jan 28, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Permissive Cross-domain Security Policy with Untrusted Domains vulnerability in Drupal Next.Js allows Cross-Site Scripting (XSS).This issue affects Next.Js: from 0.0.0 before 1.6.4, from 2.0.0 before 2.0.1.