Skip to content

CVE record · 1 source

CVE-2026-94485

Next.js is a React framework for building full-stack web applications.

Vendor: Node.js, Anthropic
Product: Node.js, Claude, AI / LLM tooling
Exposure class: Developer platform, AI infrastructure

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

10

CVE NVD 29d ago

Next.js is a React framework for building full-stack web applications.

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the `next dev` development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A…

Fix available CVE-2026-94485 Node.js Anthropic