更新: 359 个文件 - 2026-03-16 23:30:01

2026-03-16 23:30:01 -07:00
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2020-15242.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2020-15242.md
@@ -8,6 +8,10 @@ updated_date: "2026-03-13T22:14:13.665535Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -31,6 +35,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-x56p

 # Open Redirect in Next.js versions

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2020-15242`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2020-5284.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2020-5284.md
@@ -8,6 +8,10 @@ updated_date: "2025-09-26T17:49:56Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -32,6 +36,15 @@ primary_source: "https://github.com/zeit/next.js/security/advisories/GHSA-fq77-7

 # Directory Traversal in Next.js

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2020-5284`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2021-37699.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2021-37699.md
@@ -8,6 +8,10 @@ updated_date: "2026-03-13T22:00:08.038285Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -32,6 +36,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-vxf5

 # Open Redirect in Next.js

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2021-37699`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2021-39178.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2021-39178.md
@@ -8,6 +8,10 @@ updated_date: "2026-03-13T22:00:20.154452Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -32,6 +36,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-9gr3

 # XSS in Image Optimization API for Next.js

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2021-39178`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2021-43803.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2021-43803.md
@@ -8,6 +8,10 @@ updated_date: "2026-03-13T22:00:36.554552Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -34,6 +38,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-25mp

 # Unexpected server crash in Next.js.

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2021-43803`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2024-34351.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2024-34351.md
@@ -8,6 +8,10 @@ updated_date: "2026-02-04T03:32:36.434669Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -32,6 +36,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-fr5h

 # Next.js Server-Side Request Forgery in Server Actions

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2024-34351`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2024-46982.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2024-46982.md
@@ -8,6 +8,10 @@ updated_date: "2026-02-04T03:45:33.402195Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -33,6 +37,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-gp8f

 # Next.js Cache Poisoning

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2024-46982`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2024-47831.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2024-47831.md
@@ -8,6 +8,10 @@ updated_date: "2026-02-04T03:25:43.295558Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -31,6 +35,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-g77x

 # Denial of Service condition in Next.js image optimization

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2024-47831`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2024-51479.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2024-51479.md
@@ -8,6 +8,10 @@ updated_date: "2025-09-10T21:12:24Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -31,6 +35,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-7gfc

 # Next.js authorization bypass vulnerability

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2024-51479`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2024-56332.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2024-56332.md
@@ -8,6 +8,10 @@ updated_date: "2026-02-04T04:36:04.252972Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -35,6 +39,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-7m27

 # Next.js Allows a Denial of Service (DoS) with Server Actions

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2024-56332`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-29927.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-29927.md
@@ -8,6 +8,10 @@ updated_date: "2026-03-04T15:06:29.993197Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -37,6 +41,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-f82v

 # Authorization Bypass in Next.js Middleware

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2025-29927`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-30218.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-30218.md
@@ -8,6 +8,10 @@ updated_date: "2025-10-13T15:35:50Z"
 severity: "medium"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -41,6 +45,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-223j

 # Next.js may leak x-middleware-subrequest-id to external hosts

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2025-30218`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-32421.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-32421.md
@@ -8,6 +8,10 @@ updated_date: "2025-09-26T17:48:29Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -33,6 +37,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-qpjv

 # Next.js Race Condition to Cache Poisoning

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2025-32421`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-48068.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-48068.md
@@ -8,6 +8,10 @@ updated_date: "2025-06-13T14:41:21Z"
 severity: "medium"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -33,6 +37,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-3h52

 # Information exposure in Next.js dev server due to lack of origin verification

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2025-48068`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-49005.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-49005.md
@@ -8,6 +8,10 @@ updated_date: "2026-02-04T02:37:18.974477Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -31,6 +35,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-r2fc

 # Next.js has a Cache poisoning vulnerability due to omission of the Vary header

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2025-49005`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-49826.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-49826.md
@@ -8,6 +8,10 @@ updated_date: "2025-07-03T21:49:52Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -31,6 +35,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-67rr

 # Next.JS vulnerability can lead to DoS via cache poisoning 

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2025-49826`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-55173.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-55173.md
@@ -8,6 +8,10 @@ updated_date: "2026-02-04T04:35:34.538107Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -33,6 +37,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-xv57

 # Next.js Content Injection Vulnerability for Image Optimization

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2025-55173`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-57752.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-57752.md
@@ -8,6 +8,10 @@ updated_date: "2026-02-04T02:50:08.291668Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -33,6 +37,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-g5qg

 # Next.js Affected by Cache Key Confusion for Image Optimization API Routes

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2025-57752`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-57822.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-57822.md
@@ -8,6 +8,10 @@ updated_date: "2026-02-04T04:20:45.658010Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -34,6 +38,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-4342

 # Next.js Improper Middleware Redirect Handling Leads to SSRF

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2025-57822`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-59471.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-59471.md
@@ -8,6 +8,10 @@ updated_date: "2026-02-10T01:28:46.973023Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -33,6 +37,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-9g9p

 # Next.js self-hosted applications vulnerable to DoS via Image Optimizer remotePatterns configuration

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2025-59471`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-59472.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-cve-2025-59472.md
@@ -8,6 +8,10 @@ updated_date: "2026-02-06T13:13:43.709252Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -33,6 +37,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-5f7q

 # Next.js has Unbounded Memory Consumption via PPR Resume Endpoint 

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--CVE-2025-59472`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-ghsa-5j59-xgg2-r9c4.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-ghsa-5j59-xgg2-r9c4.md
@@ -8,6 +8,10 @@ updated_date: "2026-02-04T02:46:38.768104Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -48,6 +52,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-5j59

 # Next has a Denial of Service with Server Components - Incomplete Fix Follow-Up

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--GHSA-5j59-xgg2-r9c4`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-ghsa-9qr9-h5gf-34mp.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-ghsa-9qr9-h5gf-34mp.md
@@ -8,6 +8,10 @@ updated_date: "2026-02-04T03:45:15.823345Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -43,6 +47,15 @@ primary_source: "https://github.com/facebook/react/security/advisories/GHSA-fv66

 # Next.js is vulnerable to RCE in React flight protocol

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--GHSA-9qr9-h5gf-34mp`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-ghsa-h25m-26qc-wcjf.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-ghsa-h25m-26qc-wcjf.md
@@ -8,6 +8,10 @@ updated_date: "2026-02-13T00:43:52.836085Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -48,6 +52,15 @@ primary_source: "https://github.com/facebook/react/security/advisories/GHSA-83fc

 # Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--GHSA-h25m-26qc-wcjf`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-ghsa-mwv6-3258-q52c.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-ghsa-mwv6-3258-q52c.md
@@ -8,6 +8,10 @@ updated_date: "2026-02-04T03:55:54.855562Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -49,6 +53,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-mwv6

 # Next Vulnerable to Denial of Service with Server Components

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--GHSA-mwv6-3258-q52c`
--- a/07-framework-security/frameworks/nextjs/cases/nextjs-ghsa-w37m-7fhw-fmv9.md
+++ b/07-framework-security/frameworks/nextjs/cases/nextjs-ghsa-w37m-7fhw-fmv9.md
@@ -8,6 +8,10 @@ updated_date: "2026-02-04T02:51:40.627151Z"
 severity: "low"
 exploit_status: "unknown"
 source_confidence: "official"
+verification_status: "triage-manual"
+verification_mode: "synthetic"
+artifact_mode: "synthetic"
+last_run_id: ""
 target_types:
  - "lab-local"
  - "lab-public"
@@ -47,6 +51,15 @@ primary_source: "https://github.com/vercel/next.js/security/advisories/GHSA-w37m

 # Next Server Actions Source Code Exposure 

+## 本地实证状态
+
+- 实证状态: `triage-manual`
+- 实证方式: `synthetic`
+- Artifact 模式: `synthetic`
+- 最近运行: `-`
+- 浏览器证据: `missing`
+- Run Bundle: `-`
+
 ## 事件层

 - Canonical ID: `nextjs--GHSA-w37m-7fhw-fmv9`