https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 10:22:14 +0000 https://db.gcve.eu/vuln/cve-2026-44580 <p><strong>Affected:</strong> vercel next.js</p> <p>Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be vulnerable to cross-site scripting. In affected versions, serialized script content was not escaped safely before being embedded into the document, which could allow attacker-controlled input to break out of the intended script context and execute arbitrary JavaScript in a visitor&#39;s browser. This vulnerability is fixed in 15.5.16 and 16.2.5.</p> <p><strong>Affected:</strong> vercel next.js</p> <p>Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be vulnerable to cross-site scripting. In affected versions, serialized script content was not escaped safely before being embedded into the document, which could allow attacker-controlled input to break out of the intended script context and execute arbitrary JavaScript in a visitor&#39;s browser. This vulnerability is fixed in 15.5.16 and 16.2.5.</p> https://db.gcve.eu/vuln/cve-2026-44580