更新: 219 个文件 - 2026-03-16 23:45:01

07-framework-security/frameworks/nextjs/INDEX.md

@@ -12,7 +12,7 @@
 - 已实证(synthetic): `0`
 - 阻塞数: `0`
 - 待人工/缺浏览器证据: `26`
-- 最近渲染时间: `2026-03-17T06:28:45+00:00`
+- 最近渲染时间: `2026-03-17T06:35:44+00:00`
 
 ## 目标约束
 
@@ -47,7 +47,7 @@
 | Information exposure in Next.js dev server due to lack of origin verification | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2025-06-13T14:41:21Z` | [link](/Users/x/websafe/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-48068.md) |
 | Next.js Race Condition to Cache Poisoning | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2025-09-26T17:48:29Z` | [link](/Users/x/websafe/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-32421.md) |
 | Next.js may leak x-middleware-subrequest-id to external hosts | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2025-10-13T15:35:50Z` | [link](/Users/x/websafe/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-30218.md) |
-| Authorization Bypass in Next.js Middleware | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-04T15:06:29.993197Z` | [link](/Users/x/websafe/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-29927.md) |
+| Authorization Bypass in Next.js Middleware | `low` | `generated` | `triage-manual` | `real` | `official` | `2026-03-04T15:06:29.993197Z` | [link](/Users/x/websafe/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-29927.md) |
 | Next.js Allows a Denial of Service (DoS) with Server Actions | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-02-04T04:36:04.252972Z` | [link](/Users/x/websafe/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2024-56332.md) |
 | Next.js authorization bypass vulnerability | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2025-09-10T21:12:24Z` | [link](/Users/x/websafe/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2024-51479.md) |
 | Denial of Service condition in Next.js image optimization | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-02-04T03:25:43.295558Z` | [link](/Users/x/websafe/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2024-47831.md) |

07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-29927.md

@@ -9,9 +9,9 @@ severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
 verification_status: "triage-manual"
-verification_mode: "synthetic"
-artifact_mode: "synthetic"
-last_run_id: ""
+verification_mode: "real"
+artifact_mode: "official-source"
+last_run_id: "nextjs-nextjs--CVE-2025-29927-20260317063047"
 target_types:
   - "lab-local"
   - "lab-public"
@@ -44,11 +44,11 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-f82v
 ## 本地实证状态
 
 - 实证状态: `triage-manual`
-- 实证方式: `synthetic`
-- Artifact 模式: `synthetic`
-- 最近运行: `-`
+- 实证方式: `real`
+- Artifact 模式: `official-source`
+- 最近运行: `nextjs-nextjs--CVE-2025-29927-20260317063047`
 - 浏览器证据: `missing`
-- Run Bundle: `-`
+- Run Bundle: `/Users/x/websafe/06-case-studies/generated-runs/nextjs-nextjs--CVE-2025-29927-20260317063047`
 
 ## 事件层