Skip to content

Known CVE

Next.js - Server Side Request Forgery (SSRF)

Next.Js, inferior to version 14.1.1, have its image optimization built-in component prone to SSRF.

CVE-2024-34351

High2024CVSS 7.5CWE-918

cve2024 · vercel · nextjs · ssrf · vuln · oast

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website