VDB
Sign up
MEDIUM4.4

GHSA-fq77-7p7r-83rj

Directory Traversal in Next.js

Quick fix

GHSA-fq77-7p7r-83rj — next: upgrade to the fixed version with the command below.

npm install next@9.3.2

Details

### Impact

- **Not affected**: Deployments on ZEIT Now v2 ([https://zeit.co](https://zeit.co/)) are not affected - **Not affected**: Deployments using the `serverless` target - **Not affected**: Deployments using `next export` - **Affected**: Users of Next.js below 9.3.2

We recommend everyone to upgrade regardless of whether you can reproduce the issue or not.

### Patches

https://github.com/zeit/next.js/releases/tag/v9.3.2

### References

https://github.com/zeit/next.js/releases/tag/v9.3.2

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/next
Introduced in: 0.9.9Fixed in: 9.3.2
Fixnpm install next@9.3.2

References