5.3
Medium
CVE-2022-36046 Next.js is a React framework that can provide building blocks to create web applications
Description
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict `unhandledRejection` exiting AND using next start or a [custom server](https://nextjs.org/docs/advanced-features/custom-server). Deployments on Vercel ([vercel.com](https://vercel.com/)) are not affected along with similar environments where `next-server` isn't being shared across requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| next.js | 12.2.3 | No fix stated |
Other CVEs of next.js
The 57 CVEs of next.js →
CVE-2026-94482
Next.js is a React framework for building full-stack web applications
8.2
High
CVE-2026-94484
Next.js is a React framework for building full-stack web applications
6.3
Medium
CVE-2026-94485
Next.js is a React framework for building full-stack web applications
6.3
Medium
CVE-2026-94483
Next.js is a React framework for building full-stack web applications
8.3
High