Approved changes feed: RSS · Atom

cpe:2.3:a:vercel:next.js:12.2.3:*:*:*:*:node.js:*:*

part: a version: 12.2.3 update: *

VendorVercel (5676cb1a-0d7f-5c57-9405-b569f0c482e7)
ProductNext.Js (291cbef7-fa11-595c-86e3-5c00f9c5cf94)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/vercel/next.js purl2cpe 2026-06-01 10:11:38.620025
pkg:sourceforge/next-js.mirror purl2cpe 2026-06-01 10:11:38.620026

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-36046 vulnerable 2026-06-08 05:46:06.219961 Unexpected server crash in Next.js version 12.2.3
MEDIUM (5.3)
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict `unhandledRejection` exiting AND using next start or a [custom server](https://nextjs.org/docs/advanced-features/custom-server). Deployments on Vercel ([vercel.com](https://vercel.com/)) are not affected along with similar environments where `next-server` isn't being shared across requests.
Published: 2022-08-31T18:55:09.000Z
Updated: 2025-04-23T17:47:01.683Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.