ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /_next request namespace.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "4.0.0"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.2"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.3"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.4"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.5"
},
{
"introduced": "0"
},
{
"last_affected": "4.1.0"
},
{
"introduced": "0"
},
{
"last_affected": "4.1.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.1.2"
},
{
"introduced": "0"
},
{
"last_affected": "4.1.3"
},
{
"introduced": "0"
},
{
"last_affected": "4.1.4"
},
{
"introduced": "0"
},
{
"last_affected": "4.1.4-canary_1"
},
{
"introduced": "0"
},
{
"last_affected": "4.1.4-canary_2"
},
{
"introduced": "0"
},
{
"last_affected": "4.2.0"
},
{
"introduced": "0"
},
{
"last_affected": "4.2.0-canary_1"
},
{
"introduced": "0"
},
{
"last_affected": "4.2.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.2.2"
}
]
}