CVE-2026-45109 — 脆弱性インテリジェンス

vercel — next.js

公表日: 2026-05-13T17:11:07.275Z

CVSS

7.5

CISA KEV

未掲載（悪用がないことを意味しません）

情報源の原文（翻訳ではありません）

Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing CVE-2026-44575 did not apply to middleware.ts with Turbopack. This vulnerability is fixed in 15.5.18 and 16.2.6.

情報源

• CVE-2026-45109
• Original advisory
• Original advisory
• Original advisory
• Vendor Advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-45109