{"package":"next","ecosystem":"npm","latest_version":"16.2.4","description":"The React Framework","license":"MIT","homepage":"https://nextjs.org","repository":"https://github.com/vercel/next.js","downloads_weekly":36059555,"health":{"score":81,"risk":"low","breakdown":{"maintenance":25,"popularity":20,"security":17,"maturity":15,"community":4},"deprecated":false,"max_score":100},"vulnerabilities":{"count":5,"critical":0,"high":0,"medium":4,"low":1,"details":[{"vuln_id":"CVE-2025-59472","severity":"medium","summary":"Next.js has Unbounded Memory Consumption via PPR Resume Endpoint ","affected_versions":">=15.6.0-canary.0","fixed_version":"15.6.0-canary.61","source":"osv","published_at":"2026-01-28T15:20:55Z"},{"vuln_id":"GHSA-5j59-xgg2-r9c4","severity":"medium","summary":"Next has a Denial of Service with Server Components - Incomplete Fix Follow-Up","affected_versions":">=16.1.0-canary.17","fixed_version":"16.1.0-canary.19","source":"osv","published_at":"2025-12-12T17:21:57Z"},{"vuln_id":"CVE-2023-46298","severity":"unknown","summary":"Next.js missing cache-control header may lead to CDN caching empty reply","affected_versions":">=0.9.9","fixed_version":"13.4.20-canary.13","source":"osv","published_at":"2023-10-22T03:30:23Z"},{"vuln_id":"GHSA-mwv6-3258-q52c","severity":"medium","summary":"Next Vulnerable to Denial of Service with Server Components","affected_versions":">=16.1.0-canary.0","fixed_version":"16.1.0-canary.17","source":"osv","published_at":"2025-12-11T22:49:27Z"},{"vuln_id":"GHSA-w37m-7fhw-fmv9","severity":"medium","summary":"Next Server Actions Source Code Exposure ","affected_versions":">=16.1.0-canary.0","fixed_version":"16.1.0-canary.17","source":"osv","published_at":"2025-12-11T22:49:56Z"}]},"versions":{"latest":"16.2.4","total_count":3744,"recent":["16.2.1-canary.29","16.2.1-canary.30","16.2.1-canary.31","16.2.1-canary.32","16.2.1-canary.33","16.2.1-canary.34","16.2.1-canary.35","16.2.1-canary.36","16.2.1-canary.37","16.2.1-canary.38","16.2.1-canary.40","16.2.1-canary.41","16.2.1-canary.42","16.2.1-canary.43","16.2.4","16.2.1-canary.44","16.2.1-canary.45","16.2.1-canary.46","16.3.0-canary.0","16.3.0-canary.1"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":3,"first_published":"2011-07-11T11:00:45.416Z","last_published":"2026-04-15T22:33:47.905Z","dependencies_count":6,"dependencies":["postcss","@next/env","styled-jsx","@swc/helpers","caniuse-lite","baseline-browser-mapping"]},"_preprocessed":true,"_cache":"hit","_response_ms":0}