`next`

Ecosystem:
npm

Package URL:
pkg:npm/next

Total PRs:
80,883 Dependabot PRs

Latest PR:
about 1 hour ago

Unique Repositories:
28,596 repositories

Unique Repos (30 days):
4,437 repositories

Security Advisories

Next.js has cross site scripting (XSS) vulnerability via the 404 or 500 /_error page

GHSA-qw96-mm2g-c8m7 CVE-2018-18282 MODERATE published over 7 years ago • updated 8 days ago

Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /_error page.

Next.JS vulnerability can lead to DoS via cache poisoning

GHSA-67rr-84xm-4c7r CVE-2025-49826 HIGH published 8 months ago • updated 6 days ago

### Summary A vulnerability affecting Next.js has been addressed. It impacted versions 15.0.4 through 15.1.8 and involved a cache poisoning bug lea...

View all 36 advisories

Recent PRs

RSS Feed

chore(deps): bump the npm_and_yarn group across 10 directories with 17 updates

AKJUS/taral #14

14.0.4 → 15.5.10 Major PR

Open about 1 hour ago 1 comment

build(deps): bump the npm_and_yarn group across 27 directories with 11 updates

Morin3/turbo #156

15.5.2 → 16.1.6 Major PR

Open about 1 hour ago 2 comments

chore(deps): bump the next-ecosystem group with 3 updates

c4rl0s04/biwenger-euroleague-stats #12

16.1.1 → 16.1.6 Patch PR

Open about 1 hour ago 1 comment

chore(deps): bump next from 15.4.10 to 15.5.10

tmchuynh/iac_website_2.0 #14

15.4.10 → 15.5.10 Minor PR

Closed about 2 hours ago 1 comment

Bump next from 15.4.10 to 15.5.10

tmchuynh/coding-courses #12

15.4.10 → 15.5.10 Minor PR

Closed about 2 hours ago 2 comments

chore(deps): bump the npm_and_yarn group across 32 directories with 8 updates

ssushant0011/turborepo #12

15.4.0-canary.23 → 15.5.10 Minor PR

Closed about 2 hours ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates

Zzackllack/RPH-WebUI #19

15.5.9 → 15.5.12 Patch PR

Open about 3 hours ago 1 comment

Bump next from 14.2.25 to 16.1.6

albertshih3/How-Are-You #46

14.2.25 → 16.1.6 Major PR

Open about 4 hours ago 1 comment

chore(deps): bump the production-dependencies group with 151 updates

IsaiahDupree/BlogCanvas #4

16.0.7 → 16.1.6 Minor PR

Open about 4 hours ago 2 comments

Bump the npm_and_yarn group across 22 directories with 9 updates

alialobidm/react #26

15.0.0-canary.197 → 15.5.10 Minor PR

Open about 4 hours ago 3 comments

Bump the npm_and_yarn group across 23 directories with 9 updates

alialobidm/react #25

15.0.0-canary.197 → 15.5.10 Minor PR

Open about 5 hours ago 3 comments

Bump the npm_and_yarn group across 22 directories with 9 updates

alialobidm/react #24

15.0.0-canary.197 → 15.5.10 Minor PR

Closed about 5 hours ago 2 comments

Bump the npm_and_yarn group across 28 directories with 12 updates

mawazawa/liveblocks #23

12.3.4 → 15.5.10 Major PR

Open about 5 hours ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 23 updates

MetaMask/metaplex #7

12.1.0 → 15.5.10 Major PR

Open about 5 hours ago 2 comments

Bump the npm_and_yarn group across 1 directory with 12 updates

UniverseAI-Lab/u_prev3 #1

15.0.3-canary.2 → 15.5.10 Minor PR

Open about 5 hours ago 2 comments

chore(deps): bump next from 10.1.3 to 15.5.10

kurousa/nextjs_blog #3

10.1.3 → 15.5.10 Major PR

Open about 6 hours ago 1 comment

chore(deps): bump next from 10.1.3 to 15.5.10

kurousa/nextjs_authapp #5

10.1.3 → 15.5.10 Major PR

Open about 6 hours ago 1 comment

Bump next from 16.0.1 to 16.1.5

jplate/home #1

16.0.1 → 16.1.5 Minor PR

Closed about 6 hours ago 1 comment

chore(deps): Bump next from 14.2.35 to 16.1.6

mikeyoung304/MAIS #76

14.2.35 → 16.1.6 Major PR

Open about 6 hours ago 1 comment

chore(deps): bump the npm-dependencies group across 1 directory with 23 updates

michellepace/devflow #37

16.1.1 → 16.1.6 Patch PR

Open about 6 hours ago 1 comment

chore(deps): bump the minor-and-patch group across 1 directory with 14 updates

Digidai/HumanTouch #14

16.1.1 → 16.1.6 Patch PR

Open about 6 hours ago 2 comments

build(deps): bump next from 15.4.8 to 15.5.10

Mozilla-Campus-Club-of-SLIIT/blog #43

15.4.8 → 15.5.10 Minor PR

Closed about 7 hours ago 2 comments

Bump minimatch and next

paulosarmento/AmigoSecreto-Next-Vercel #30

10.0.3 → 10.2.3 Minor PR

Open about 7 hours ago 1 comment

chore(deps-dev): bump next from 16.1.1 to 16.1.5 in the npm_and_yarn group across 1 directory

AKJUS/styled-components #32

16.1.1 → 16.1.5 Patch PR

Open about 7 hours ago 1 comment

chore(deps): bump the npm_and_yarn group across 18 directories with 18 updates

LelandParker/supabase #6

14.2.21 → 15.5.10 Major PR

Closed about 7 hours ago 1 comment

build(deps): bump the npm_and_yarn group across 29 directories with 11 updates

Morin3/turbo #155

15.5.2 → 16.1.6 Major PR

Open about 7 hours ago 2 comments

build(deps): bump the npm_and_yarn group across 27 directories with 11 updates

Morin3/turbo #154

15.5.2 → 16.1.6 Major PR

Open about 8 hours ago 2 comments

chore(deps): bump the npm_and_yarn group across 14 directories with 9 updates

xendit/mastra #19

15.2.4 → 15.5.10 Minor PR

Closed about 8 hours ago 1 comment

Bump next from 15.5.9 to 15.5.10

lydianai/anatolia.ailydian.com #12

15.5.9 → 15.5.10 Patch PR

Open about 10 hours ago 1 comment

build(deps): bump next from 16.0.10 to 16.1.6

lydianai/otoail.ailydian.com #11

16.0.10 → 16.1.6 Minor PR

Open about 10 hours ago 1 comment

Bump next from 16.0.10 to 16.1.5

ThunderboltDev/ThunderboltDev #1

16.0.10 → 16.1.5 Minor PR

Open about 10 hours ago 1 comment

chore(deps): bump the npm_and_yarn group across 25 directories with 10 updates

AKJUS/web-examples #188

14.2.7 → 15.5.10 Major PR

Closed about 11 hours ago 2 comments

:arrow_up: chore: update dependencies [skip ci]: Bump the npm-packages group across 1 directory with 37 updates

ivanshaba/Ivan.com #9

16.0.7 → 16.1.6 Minor PR

Open about 11 hours ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 12 updates

Sherlock999xxx/voltagent #9

16.0.7 → 16.1.5 Minor PR

Open about 12 hours ago 3 comments

Bump next from 15.5.9 to 15.5.12

poliberry/crystal #20

15.5.9 → 15.5.12 Patch PR

Open about 12 hours ago 1 comment

chore(deps): bump the all-dependencies group across 1 directory with 12 updates

derodero24/react-web3-icons #12

13.5.11 → 16.1.6 Major PR

Open about 12 hours ago 2 comments

chore(deps): bump the dependencies group across 1 directory with 16 updates

3omdawy/next-ssg-for-md-blog #24

16.1.4 → 16.1.6 Patch PR

Open about 12 hours ago 1 comment

chore(deps): bump the npm_and_yarn group across 6 directories with 6 updates

FlexNetOS/noa #127

16.0.10 → 16.1.5 Minor PR

Closed about 12 hours ago 1 comment

Bump the npm_and_yarn group across 2 directories with 26 updates

serinuntius/tokenized-url #7

10.0.7 → 15.5.10 Major PR

Open about 12 hours ago 1 comment

chore(deps): bump next from 15.4.9 to 15.5.10

Debbl/emoji-kitchen #20

15.4.9 → 15.5.10 Minor PR

Open about 13 hours ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 17 updates

atze1210/aa-sdk #185

14.2.29 → 15.5.10 Major PR

Open about 13 hours ago 2 comments

Bump the npm_and_yarn group across 5 directories with 18 updates

ammar-knowledge/storybook #405

15.5.6 → 15.5.10 Patch PR

Open about 13 hours ago 3 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 6 updates

jgeofil/onchainkit #3

14.2.26 → 15.5.10 Major PR

Open about 13 hours ago 1 comment

build(deps): bump the npm_and_yarn group across 3 directories with 17 updates

Dargon789/aa-sdk #98

14.2.33 → 15.5.10 Major PR

Closed about 13 hours ago 3 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 8 updates

alchemyplatform/aa-sdk #2356

14.2.29 → 15.5.10 Major PR

Open about 13 hours ago 2 comments

Bump the npm_and_yarn group across 14 directories with 7 updates

LearningBackwards/react1.8 #61

15.2.0-canary.66 → 15.5.10 Minor PR

Open about 14 hours ago 1 comment

Bump the npm_and_yarn group across 2 directories with 12 updates

jack-pap/Summoners-Card #9

14.2.35 → 16.1.6 Major PR

Open about 14 hours ago 1 comment

Bump the npm_and_yarn group across 3 directories with 20 updates

GlacierEQ/plate #4

15.3.3 → 15.5.10 Minor PR

Open about 14 hours ago 3 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 8 updates

openfort-xyz/ecosystem-sample #26

14.2.32 → 15.5.10 Major PR

Open about 15 hours ago 1 comment

chore(deps): bump the npm_and_yarn group across 8 directories with 7 updates

asrar-mared/x402 #58

15.4.0-canary.113 → 16.2.0-canary.57 Major PR

Open about 15 hours ago 1 comment

Package Details

Name:	`next`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/next`
JSON API:	View JSON

Security Advisories

36

Active advisories

CRITICAL 2

HIGH 14

MODERATE 15

LOW 5

View All npm Advisories

Package Information

Description:

The React Framework

Repository:	https://github.com/vercel/next.js
Homepage:	https://nextjs.org
Latest Release:	`15.0.3` over 1 year ago
Dependent Repos:	345,645
Dependent Packages:	8,463
Downloads:	32,544,543
Ranking:	Top 0.0603% by dependent repos Top 0.0542% by downloads Top 0.0114% by dependent pkgs

PR Status

Open 41,999 (51.9%)

Merged 7,236 (8.9%)

Closed 26,637 (32.9%)

PR Types

Removal 15 (0.0%)

Minor 27,782 (34.3%)

Major 16,216 (20.0%)

Patch 31,323 (38.7%)

next

Security Advisories

Next.js has Unbounded Memory Consumption via PPR Resume Endpoint

Open Redirect in Next.js

Next.js Race Condition to Cache Poisoning

Next.js has cross site scripting (XSS) vulnerability via the 404 or 500 /_error page

Next.JS vulnerability can lead to DoS via cache poisoning

Recent PRs

Package Details

Security Advisories

36

Package Information

PR Status

PR Types

`next`