CVE-2026-78180

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-78180", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-08-23T16:03:29.986Z", "datePublished": "2026-08-24T03:15:08.568Z", "dateUpdated": "2026-08-24T17:12:36.614Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-24T03:15:08.568Z"}, "title": "alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-1321", "lang": "en", "description": "Improperly Controlled Modification of Object Prototype Attributes"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-94", "lang": "en", "description": "Code Injection"}]}], "affected": [{"vendor": "alibaba-fusion", "product": "next", "versions": [{"version": "1.27.0", "status": "affected"}, {"version": "1.27.1", "status": "affected"}, {"version": "1.27.2", "status": "affected"}, {"version": "1.27.3", "status": "affected"}, {"version": "1.27.4", "status": "affected"}, {"version": "1.27.5", "status": "affected"}, {"version": "1.27.6", "status": "affected"}, {"version": "1.27.7", "status": "affected"}, {"version": "1.27.8", "status": "affected"}, {"version": "1.27.9", "status": "affected"}, {"version": "1.27.10", "status": "affected"}, {"version": "1.27.11", "status": "affected"}, {"version": "1.27.12", "status": "affected"}, {"version": "1.27.13", "status": "affected"}, {"version": "1.27.14", "status": "affected"}, {"version": "1.27.15", "status": "affected"}, {"version": "1.27.16", "status": "affected"}, {"version": "1.27.17", "status": "affected"}, {"version": "1.27.18", "status": "affected"}, {"version": "1.27.19", "status": "affected"}, {"version": "1.27.20", "status": "affected"}, {"version": "1.27.21", "status": "affected"}, {"version": "1.27.22", "status": "affected"}, {"version": "1.27.23", "status": "affected"}, {"version": "1.27.24", "status": "affected"}, {"version": "1.27.25", "status": "affected"}, {"version": "1.27.26", "status": "affected"}, {"version": "1.27.27", "status": "affected"}, {"version": "1.27.28", "status": "affected"}, {"version": "1.27.29", "status": "affected"}, {"version": "1.27.30", "status": "affected"}, {"version": "1.27.31", "status": "affected"}, {"version": "1.27.32", "status": "affected"}, {"version": "1.27.33", "status": "affected"}, {"version": "1.27.34", "status": "affected"}], "cpes": ["cpe:2.3:a:next:next:*:*:*:*:*:*:*:*"], "modules": ["deepMerge"]}], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider.getContextProps of the file components/dialog/index.tsx of the component deepMerge. Performing a manipulation of the argument locale results in improperly controlled modification of object prototype attributes. The attack may be initiated remotely. The reported GitHub issue was closed automatically due to inactivity."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-08-23T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-08-23T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-08-23T18:09:55.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "wjm3 (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/394564", "name": "VDB-394564 | alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/394564/cti", "name": "VDB-394564 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-78180", "name": "CVE-2026-78180 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/884184", "name": "Submit #884184 | Node.js @alifd/next 1.27.34 Prototype Pollution", "tags": ["third-party-advisory"]}, {"url": "https://github.com/alibaba-fusion/next/issues/5101", "tags": ["issue-tracking"]}, {"url": "https://github.com/alibaba-fusion/next/", "tags": ["product"]}], "x_generator": ["VulDB PVTS v202608"]}, "adp": [{"references": [{"url": "https://github.com/alibaba-fusion/next/issues/5101", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-24T17:06:22.477505Z", "id": "CVE-2026-78180", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-24T17:12:36.614Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-78180", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-24T17:06:22.477505Z"}}}], "references": [{"url": "https://github.com/alibaba-fusion/next/issues/5101", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-24T17:05:39.672Z"}}], "cna": {"title": "alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution", "credits": [{"lang": "en", "type": "reporter", "value": "wjm3 (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:next:next:*:*:*:*:*:*:*:*"], "vendor": "alibaba-fusion", "modules": ["deepMerge"], "product": "next", "versions": [{"status": "affected", "version": "1.27.0"}, {"status": "affected", "version": "1.27.1"}, {"status": "affected", "version": "1.27.2"}, {"status": "affected", "version": "1.27.3"}, {"status": "affected", "version": "1.27.4"}, {"status": "affected", "version": "1.27.5"}, {"status": "affected", "version": "1.27.6"}, {"status": "affected", "version": "1.27.7"}, {"status": "affected", "version": "1.27.8"}, {"status": "affected", "version": "1.27.9"}, {"status": "affected", "version": "1.27.10"}, {"status": "affected", "version": "1.27.11"}, {"status": "affected", "version": "1.27.12"}, {"status": "affected", "version": "1.27.13"}, {"status": "affected", "version": "1.27.14"}, {"status": "affected", "version": "1.27.15"}, {"status": "affected", "version": "1.27.16"}, {"status": "affected", "version": "1.27.17"}, {"status": "affected", "version": "1.27.18"}, {"status": "affected", "version": "1.27.19"}, {"status": "affected", "version": "1.27.20"}, {"status": "affected", "version": "1.27.21"}, {"status": "affected", "version": "1.27.22"}, {"status": "affected", "version": "1.27.23"}, {"status": "affected", "version": "1.27.24"}, {"status": "affected", "version": "1.27.25"}, {"status": "affected", "version": "1.27.26"}, {"status": "affected", "version": "1.27.27"}, {"status": "affected", "version": "1.27.28"}, {"status": "affected", "version": "1.27.29"}, {"status": "affected", "version": "1.27.30"}, {"status": "affected", "version": "1.27.31"}, {"status": "affected", "version": "1.27.32"}, {"status": "affected", "version": "1.27.33"}, {"status": "affected", "version": "1.27.34"}]}], "timeline": [{"lang": "en", "time": "2026-08-23T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-08-23T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-08-23T18:09:55.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/394564", "name": "VDB-394564 | alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/394564/cti", "name": "VDB-394564 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-78180", "name": "CVE-2026-78180 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/884184", "name": "Submit #884184 | Node.js @alifd/next 1.27.34 Prototype Pollution", "tags": ["third-party-advisory"]}, {"url": "https://github.com/alibaba-fusion/next/issues/5101", "tags": ["issue-tracking"]}, {"url": "https://github.com/alibaba-fusion/next/", "tags": ["product"]}], "x_generator": ["VulDB PVTS v202608"], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider.getContextProps of the file components/dialog/index.tsx of the component deepMerge. Performing a manipulation of the argument locale results in improperly controlled modification of object prototype attributes. The attack may be initiated remotely. The reported GitHub issue was closed automatically due to inactivity."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1321", "description": "Improperly Controlled Modification of Object Prototype Attributes"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "Code Injection"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-24T03:15:08.568Z"}}}, "cveMetadata": {"cveId": "CVE-2026-78180", "state": "PUBLISHED", "dateUpdated": "2026-08-24T17:12:36.614Z", "dateReserved": "2026-08-23T16:03:29.986Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-08-24T03:15:08.568Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:next:next:*:*:*:*:*:*:*:*"], "modules": ["deepMerge"], "product": "next", "vendor": "alibaba-fusion", "versions": [{"status": "affected", "version": "1.27.0"}, {"status": "affected", "version": "1.27.1"}, {"status": "affected", "version": "1.27.2"}, {"status": "affected", "version": "1.27.3"}, {"status": "affected", "version": "1.27.4"}, {"status": "affected", "version": "1.27.5"}, {"status": "affected", "version": "1.27.6"}, {"status": "affected", "version": "1.27.7"}, {"status": "affected", "version": "1.27.8"}, {"status": "affected", "version": "1.27.9"}, {"status": "affected", "version": "1.27.10"}, {"status": "affected", "version": "1.27.11"}, {"status": "affected", "version": "1.27.12"}, {"status": "affected", "version": "1.27.13"}, {"status": "affected", "version": "1.27.14"}, {"status": "affected", "version": "1.27.15"}, {"status": "affected", "version": "1.27.16"}, {"status": "affected", "version": "1.27.17"}, {"status": "affected", "version": "1.27.18"}, {"status": "affected", "version": "1.27.19"}, {"status": "affected", "version": "1.27.20"}, {"status": "affected", "version": "1.27.21"}, {"status": "affected", "version": "1.27.22"}, {"status": "affected", "version": "1.27.23"}, {"status": "affected", "version": "1.27.24"}, {"status": "affected", "version": "1.27.25"}, {"status": "affected", "version": "1.27.26"}, {"status": "affected", "version": "1.27.27"}, {"status": "affected", "version": "1.27.28"}, {"status": "affected", "version": "1.27.29"}, {"status": "affected", "version": "1.27.30"}, {"status": "affected", "version": "1.27.31"}, {"status": "affected", "version": "1.27.32"}, {"status": "affected", "version": "1.27.33"}, {"status": "affected", "version": "1.27.34"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider.getContextProps of the file components/dialog/index.tsx of the component deepMerge. Performing a manipulation of the argument locale results in improperly controlled modification of object prototype attributes. The attack may be initiated remotely. The reported GitHub issue was closed automatically due to inactivity."}, {"lang": "es", "value": "Una falla de seguridad ha sido descubierta en alibaba-fusion next hasta la versi\u00f3n 1.27.34. Este problema afecta a la funci\u00f3n ConfigProvider.getContextProps del archivo components/dialog/index.tsx del componente deepMerge. Realizar una manipulaci\u00f3n del argumento locale resulta en una modificaci\u00f3n indebidamente controlada de atributos de prototipo de objeto. El ataque puede ser iniciado remotamente. El problema de GitHub reportado fue cerrado autom\u00e1ticamente debido a inactividad."}], "id": "CVE-2026-78180", "lastModified": "2026-10-12T16:10:00.220", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-78180", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-24T17:06:22.477505Z", "version": "2.0.3"}}]}, "published": "2026-08-24T04:16:58.647", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/alibaba-fusion/next/"}, {"source": "cna@vuldb.com", "url": "https://github.com/alibaba-fusion/next/issues/5101"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-78180"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/884184"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/394564"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/394564/cti"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/alibaba-fusion/next/issues/5101"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}, {"lang": "en", "value": "CWE-1321"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.8"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.9"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.10"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.11"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.12"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.13"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.14"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.15"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.16"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.17"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.18"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.19"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.20"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.21"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.22"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.23"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.24"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.25"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.26"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.27"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.28"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.29"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.30"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.31"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.32"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.33"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.27.34"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "next", "source": "cna", "vendor": "alibaba-fusion"}, "product": "next", "vendor": "alibaba-fusion"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "next", "vendor": "next"}], "created": "2026-08-24T05:00:04.933811+00:00", "updated": "2026-08-24T21:11:56.315185+00:00", "vendors": ["alibaba-fusion", "alibaba-fusion$PRODUCT$next", "next", "next$PRODUCT$next"]}