{"id":"EUVD-2026-30061","enisaUuid":"1bf4bce4-5e41-3764-8e5d-cdd50f9f2654","description":"Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. An attacker could cause out-of-memory conditions by requesting large local assets from the /_next/image endpoint that match the images.localPatterns configuration (by default, all patterns are allowed). This vulnerability is fixed in 15.5.16 and 16.2.5.","datePublished":"May 13, 2026, 5:00:02 PM","dateUpdated":"Aug 13, 2026, 12:04:26 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\n","aliases":"CVE-2026-44577\nGHSA-h64f-5h5j-jqjh\n","assigner":"GitHub_M","epss":0.74,"enisaIdProduct":[{"id":"4d2f0afc-5f8a-3d13-9ad6-2cb0615ccf29","product":{"name":"next.js","vendor":{"name":"vercel"}},"product_version":"10.0.0, \u003c 15.5.16"},{"id":"724e831f-ad4f-3854-850d-e5fadf07058c","product":{"name":"next.js","vendor":{"name":"vercel"}},"product_version":"16.0.0, \u003c 16.2.5"}],"enisaIdVendor":[{"id":"1b12d199-fb07-34fb-a743-67f8688635ae","vendor":{"name":"vercel"}}],"enisaIdVulnerability":[{"id":"6bc79475-6510-3443-8e01-2deba42350fb","vulnerability":{"id":"CVE-2026-44577","description":"Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. An attacker could cause out-of-memory conditions by requesting large local assets from the /_next/image endpoint that match the images.localPatterns configuration (by default, all patterns are allowed). This vulnerability is fixed in 15.5.16 and 16.2.5.","datePublished":"May 13, 2026, 5:00:02 PM","dateUpdated":"Aug 13, 2026, 12:04:26 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\n","enisa_id":"EUVD-2026-30061\n","assigner":"GitHub_M","epss":0.74,"dataProcessed":"Oct 30, 2026, 7:17:58 AM","vulnerabilityProduct":[{"id":"2f6be330-79fe-392a-988b-52e7e1024320","product":{"name":"next.js","vendor":{"name":"vercel"}},"product_version":"16.0.0, \u003c 16.2.5"},{"id":"a9166c09-d283-3ddf-99af-7d527e0878ab","product":{"name":"next.js","vendor":{"name":"vercel"}},"product_version":"10.0.0, \u003c 15.5.16"}],"vulnerabilityVendor":[{"id":"d7d56408-85af-39ec-bbf9-c39fcd78dace","vendor":{"name":"vercel"}}]}},{"id":"925a7ef1-4c87-368d-a63c-7ad1ebd0cc5b","vulnerability":{"id":"GHSA-h64f-5h5j-jqjh","description":"Next.js has a Denial of Service in the Image Optimization API","datePublished":"May 11, 2026, 3:56:05 PM","dateUpdated":"May 14, 2026, 8:38:16 PM","baseScore":0.0,"references":"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-44577\nhttps://github.com/vercel/next.js\nhttps://github.com/vercel/next.js/releases/tag/v15.5.16\nhttps://github.com/vercel/next.js/releases/tag/v16.2.5\n","enisa_id":"EUVD-2026-30061\n","aliases":"GHSA-h64f-5h5j-jqjh\nCVE-2026-44577\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:50 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"2a30a44f-0324-3ef7-859b-77494d46a33b","advisory":{"id":"RHSA-2026:37272","description":"Red Hat Security Advisory: RHTAS 1.4.2 - Red Hat Trusted Artifact Signer Release","summary":"The 1.4.2 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4","datePublished":"Jul 9, 2026, 11:43:10 AM","dateUpdated":"Oct 23, 2026, 5:31:45 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:37272\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37272.json\n","aliases":"CVE-2025-71319\nCVE-2026-39828\nCVE-2026-39829\nCVE-2026-39830\nCVE-2026-39835\nCVE-2026-42151\nCVE-2026-42570\nCVE-2026-44573\nCVE-2026-44574\nCVE-2026-44575\nCVE-2026-44577\nCVE-2026-44578\nCVE-2026-44579\nCVE-2026-45109\nCVE-2026-45736\nCVE-2026-48779\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0d3ebed6-4497-311a-bbe7-d728076136ba","product":{"name":"registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64","vendor":{"name":"Red Hat"}}},{"id":"28bb2d8d-09c5-39f2-ae8f-3b3e2ef8f57f","product":{"name":"registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64","vendor":{"name":"Red Hat"}}},{"id":"4966c6f7-9010-3c7e-b4f5-fb49a2db40cc","product":{"name":"registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64","vendor":{"name":"Red Hat"}}},{"id":"61a8cc47-ddd1-3e44-988f-a5ce59ea09b0","product":{"name":"registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64","vendor":{"name":"Red Hat"}}},{"id":"7e1dc536-50ee-3dcb-a7e0-a25085cda510","product":{"name":"registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64","vendor":{"name":"Red Hat"}}},{"id":"8ebdfa58-aa35-3c2f-af46-81e928b4ddf7","product":{"name":"registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64","vendor":{"name":"Red Hat"}}},{"id":"90a7416b-d741-398a-b2aa-0f2de4eb85c3","product":{"name":"registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64","vendor":{"name":"Red Hat"}}},{"id":"a3b1dbd0-0004-358b-b6d0-62815640fd9b","product":{"name":"registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64","vendor":{"name":"Red Hat"}}},{"id":"a4c33a54-9547-3a22-8e0c-5d2540d3f1b4","product":{"name":"Red Hat Trusted Artifact Signer 1.4","vendor":{"name":"Red Hat"}}},{"id":"bce53b05-b1e1-38a0-a40c-e5b887be8823","product":{"name":"registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64","vendor":{"name":"Red Hat"}}},{"id":"d87264a3-249e-321c-b036-020c31b5012d","product":{"name":"registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"3e43032b-e79d-3e57-937f-100094f159fd","advisory":{"id":"WID-SEC-W-2026-1401","description":"Vercel Next.js: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in Vercel Next.js ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.","datePublished":"May 6, 2026, 10:00:00 PM","dateUpdated":"May 13, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1401.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-1401\n","aliases":"CVE-2026-23870\nCVE-2026-44572\nCVE-2026-44573\nCVE-2026-44574\nCVE-2026-44575\nCVE-2026-44576\nCVE-2026-44577\nCVE-2026-44578\nCVE-2026-44579\nCVE-2026-44580\nCVE-2026-44581\nCVE-2026-44582\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"4e34fb10-e5d0-3e4b-8497-b7a28d0c5bdf","product":{"name":"next.js","vendor":{"name":"vercel"}}},{"id":"6eef55a1-eced-366b-8ed5-72c112ffd47b","product":{"name":"15.5.16","vendor":{"name":"vercel"}}},{"id":"83bd8c68-9fd8-3c45-b4fe-706987676131","product":{"name":"16.2.5","vendor":{"name":"vercel"}}}]}},{"id":"5fe00485-f1dc-3a97-995e-d3619c632651","advisory":{"id":"RHSA-2026:54435","description":"Red Hat Security Advisory: Streams for Apache Kafka 3.2.1 release and security update","summary":"Streams for Apache Kafka 3.2.1 is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"Aug 12, 2026, 7:35:14 PM","dateUpdated":"Oct 23, 2026, 7:36:38 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:54435\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54435.json\n","aliases":"CVE-2026-6860\nCVE-2026-10051\nCVE-2026-15075\nCVE-2026-15076\nCVE-2026-16308\nCVE-2026-27145\nCVE-2026-32283\nCVE-2026-33811\nCVE-2026-34478\nCVE-2026-34480\nCVE-2026-34481\nCVE-2026-35554\nCVE-2026-39821\nCVE-2026-39852\nCVE-2026-40983\nCVE-2026-40984\nCVE-2026-42504\nCVE-2026-42578\nCVE-2026-42579\nCVE-2026-42581\nCVE-2026-42583\nCVE-2026-42584\nCVE-2026-42587\nCVE-2026-44249\nCVE-2026-44573\nCVE-2026-44574\nCVE-2026-44575\nCVE-2026-44577\nCVE-2026-44578\nCVE-2026-44579\nCVE-2026-44893\nCVE-2026-45109\nCVE-2026-45416\nCVE-2026-45674\nCVE-2026-47691\nCVE-2026-48043\nCVE-2026-48059\nCVE-2026-49978\nCVE-2026-50193\nCVE-2026-50559\nCVE-2026-54512\nCVE-2026-54513\nCVE-2026-55225\nCVE-2026-55831\nCVE-2026-55833\nCVE-2026-56745\nCVE-2026-56746\nCVE-2026-56819\nCVE-2026-59869\nCVE-2026-59899\nCVE-2026-59901\nCVE-2026-64641\nCVE-2026-64644\nCVE-2026-64645\nCVE-2026-64646\nCVE-2026-64648\nCVE-2026-64649\nCVE-2026-69153\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"54bf2300-38b2-3b62-b9bb-280d0cd5af56","product":{"name":"Streams for Apache Kafka 3.2.1","vendor":{"name":"Red Hat"}}}]}},{"id":"df18cfb1-b04b-3212-aa43-8b1f782ffeb5","advisory":{"id":"RHSA-2026:40974","description":"Red Hat Security Advisory: RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release","summary":"The 1.3.6 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3","datePublished":"Jul 16, 2026, 11:19:42 AM","dateUpdated":"Oct 23, 2026, 5:31:48 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:40974\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40974.json\n","aliases":"CVE-2026-39828\nCVE-2026-39829\nCVE-2026-39830\nCVE-2026-39831\nCVE-2026-39835\nCVE-2026-42151\nCVE-2026-42154\nCVE-2026-44573\nCVE-2026-44574\nCVE-2026-44575\nCVE-2026-44577\nCVE-2026-44578\nCVE-2026-44579\nCVE-2026-45109\nCVE-2026-46597\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0e7addbb-24c7-3d81-95dd-a3b7077160d4","product":{"name":"Red Hat Trusted Artifact Signer 1.3","vendor":{"name":"Red Hat"}}},{"id":"1ceb13d3-4472-3de5-a188-885f79eb1434","product":{"name":"registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64","vendor":{"name":"Red Hat"}}},{"id":"213395f5-6df9-3e89-a9e0-3ec7c81a94d7","product":{"name":"registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64","vendor":{"name":"Red Hat"}}},{"id":"24ffc8b8-312d-333b-b2f8-b7a716be81aa","product":{"name":"registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64","vendor":{"name":"Red Hat"}}},{"id":"48d42be0-c4cc-30a8-9528-4428f136c725","product":{"name":"registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64","vendor":{"name":"Red Hat"}}},{"id":"67ba3c06-a9bd-3497-8cc5-bd199dffbc52","product":{"name":"registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64","vendor":{"name":"Red Hat"}}},{"id":"a6ad233a-e304-36f0-8d81-07b89edc2529","product":{"name":"registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64","vendor":{"name":"Red Hat"}}},{"id":"b40d8161-9fef-3ba3-826f-b43c04e9fc91","product":{"name":"registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64","vendor":{"name":"Red Hat"}}},{"id":"bd73aa3f-d3d5-309f-a57f-5e39945ae84a","product":{"name":"registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64","vendor":{"name":"Red Hat"}}},{"id":"e3e3aa23-3b2a-3a8c-8d33-5a0395491168","product":{"name":"registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64","vendor":{"name":"Red Hat"}}},{"id":"ecbc131c-0c43-3eb0-a4e2-8c9c8bcebb00","product":{"name":"registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"e53681a2-a626-334e-8fb7-6ec7c4f4a87f","advisory":{"id":"RHSA-2026:34608","description":"Red Hat Security Advisory: Streams for Apache Kafka 2.9.4 release and security update","summary":"Streams for Apache Kafka 2.9.4 is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"Jul 2, 2026, 12:03:15 AM","dateUpdated":"Oct 23, 2026, 11:03:22 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:34608\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34608.json\n","aliases":"CVE-2024-29371\nCVE-2025-13465\nCVE-2025-58056\nCVE-2026-1002\nCVE-2026-4800\nCVE-2026-6860\nCVE-2026-23864\nCVE-2026-24281\nCVE-2026-24308\nCVE-2026-27980\nCVE-2026-33870\nCVE-2026-33871\nCVE-2026-34480\nCVE-2026-39852\nCVE-2026-41240\nCVE-2026-42044\nCVE-2026-42583\nCVE-2026-42587\nCVE-2026-44249\nCVE-2026-44573\nCVE-2026-44574\nCVE-2026-44575\nCVE-2026-44577\nCVE-2026-44578\nCVE-2026-44579\nCVE-2026-44893\nCVE-2026-45109\nCVE-2026-45416\nCVE-2026-45674\nCVE-2026-47691\nCVE-2026-48043\nCVE-2026-48059\nCVE-2026-50010\nCVE-2026-50559\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"852b98d0-e6bd-3554-9c87-471499b39e25","product":{"name":"Streams for Apache Kafka 2.9.4","vendor":{"name":"Red Hat"}}}]}}]}