组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 风险等级 | CVSS | EPSS | 利用情报 | 披露时间 | |
|---|---|---|---|---|---|---|
| Next.js Middleware Authorization Bypass | 严重 | — | — | PoCEXP | ||
| Next.js WebSocket Upgrade Handler - SSRF | 高危 | — | — | PoCEXP | ||
| React Server Components - Denial of Service | 严重 | 7.5 | — | PoCEXP | ||
| React Server Components Remote Code Execution | 严重 | 10.0 | — | PoCEXP | ||
| Next.js / Vite Public ENV Exposure | 中危 | — | — | PoCEXP | ||
| Next.js Middleware - Server-Side Request Forgery | 高危 | 8.2 | — | PoCEXP | ||
| Next.js Cache Poisoning | 高危 | — | — | PoCEXP | ||
| Next.js Middleware Bypass | 严重 | 9.1 | 93.6% | PoCEXP | ||
| Next.js - Cache Poisoning | 高危 | — | — | PoCEXP | ||
| Next.js - Cache Poisoning | 高危 | — | — | PoCEXP | ||
| Next.js - Server Side Request Forgery (SSRF) | 高危 | 7.5 | 92.0% | PoCEXP | ||
| Next.js <1.2.3 - Open Redirect | 中危 | 6.1 | — | PoCEXP | ||
| Next.js <9.3.2 - Local File Inclusion | 中危 | 4.3 | 77.3% | PoCEXP | ||
| Zeit Next.js <4.2.3 - Local File Inclusion | 高危 | 7.5 | 50.2% | PoCEXP | ||
| Nextjs <2.4.1 - Local File Inclusion | 高危 | 7.5 | 83.2% | PoCEXP |