next
The React Framework
88%
Total Score
healthy
Long-running releases, active organizational maintenance, and broad contributor activity outweigh limited workflow hygiene concerns.
Health Score Breakdown
All 29 workflows were analyzed with no failed files; only one of 134 action references is unpinned. However, high-confidence template-injection findings and high-confidence secrets-inherit findings are genuine workflow hygiene concerns, while the low-confidence cache-poisoning findings carry limited weight.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-720263 next is vulnerable to Information Disclosure in versions 16.3.0 - 16.3.7. | 16.3.0 - 16.3.7 | Medium |
AIKIDO-2026-884170 next is vulnerable to Cache Poisoning in versions 15.0.0 - 15.5.26 and 16.0.0 - 16.3.7. | 15.0.0 - 15.5.2616.0.0 - 16.3.7 | Medium |
AIKIDO-2026-683913 next is vulnerable to Cache Poisoning in versions 15.0.0 - 15.5.26 and 16.0.0 - 16.3.7. | 15.0.0 - 15.5.2616.0.0 - 16.3.7 | Medium |
AIKIDO-2026-16130 next is vulnerable to Information Disclosure in versions 16.0.0 - 16.3.7. | 16.0.0 - 16.3.7 | Medium |
AIKIDO-2026-262339 next is vulnerable to Server-Side Request Forgery (SSRF) in versions 16.0.0 - 16.3.7. | 16.0.0 - 16.3.7 | High |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 postcss Version 8.5.23 | — | — |
@next/env Version 16.4.0 | — | — |
styled-jsx Version 5.1.6 | — | — |
@swc/helpers Version 0.5.23 | — | — |
caniuse-lite Version ^1.0.30001579 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 15 years ago
- Unpacked Size
- 183.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.