CVE Intelligence

Drupal Next.js vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Drupal Next.js: 1 record(s), with affected versions and fixes.

CVE-2025-13984 Medium · 6.1 CWE-942 Jan 28, 2026
Next.js - Critical - Access bypass - SA-CONTRIB-2025-122
Permissive Cross-domain Security Policy with Untrusted Domains vulnerability in Drupal Next.Js allows Cross-Site Scripting (XSS).This issue affects Next.Js: from 0.0.0 before 1.6.4, from 2.0.0 before 2.0.1.