~ / search / GHSA-fq77-7p7r-83rj

GHSA-fq77-7p7r-83rj

Directory Traversal in Next.js

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-5284

Packages

EcosystemPackageAffectedFixed in
npm next >= 0.9.9, < 9.3.2 9.3.2

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact - **Not affected**: Deployments on ZEIT Now v2 ([https://zeit.co](https://zeit.co/)) are not affected - **Not affected**: Deployments using the `serverless` target - **Not affected**: Deployments using `next export` - **Affected**: Users of Next.js below 9.3.2 We recommend everyone to upgrade regardless of whether you can reproduce the issue or not. ### Patches https://github.com/zeit/next.js/releases/tag/v9.3.2 ### References https://github.com/zeit/next.js/releases/tag/v9.3.2

References

External links from the advisory. They lead to third-party sites.