{
  "entity_id": "nextjs",
  "entity_type": "system",
  "display_name": "Next.js",
  "parent_entity_id": null,
  "root_system_id": "nextjs",
  "category": "frameworks",
  "ecosystem": "frameworks",
  "official": true,
  "status": "cataloged",
  "history_policy": "history-full",
  "repo_url": "",
  "package_registry": "",
  "marketplace_url": "",
  "latest_version": "16.2.2",
  "version_scheme": "vendor",
  "latest_release_at": "",
  "latest_release_url": "https://www.npmjs.com/package/next",
  "version_source_refs": [],
  "version_sync_status": "green",
  "security_version_count": 168,
  "last_version_synced_at": "2026-04-01T09:20:45+00:00",
  "latest_version_evidence": [],
  "catalog_source": "",
  "catalog_reason": "",
  "auto_cataloged": false,
  "last_discovered_at": "2026-03-19T18:48:06+00:00",
  "last_synced_at": "2026-03-19T18:48:06+00:00",
  "history_backfill_status": "complete",
  "latest_sync_status": "green",
  "official_source_covered": true,
  "advisory_count": 66,
  "workflow_complete_advisory_count": 66,
  "version_mapped_advisory_count": 41,
  "first_advisory_at": "2017-12-05T02:04:14+00:00",
  "latest_advisory_at": "2026-03-25T19:49:01+00:00",
  "advisory_ids": [
    "nextjs--0bc50e56d4",
    "nextjs--0dc6888d4d",
    "nextjs--141ab877e6",
    "nextjs--1dc77c2e8c",
    "nextjs--2273921172",
    "nextjs--2f7ce5f22d",
    "nextjs--30749468ad",
    "nextjs--33433e3c48",
    "nextjs--49efa644c2",
    "nextjs--4a184c2b42",
    "nextjs--4f1317042a",
    "nextjs--89882b7557",
    "nextjs--8e12818ec0",
    "nextjs--CVE-2017-16877",
    "nextjs--CVE-2018-18282",
    "nextjs--CVE-2018-6184",
    "nextjs--CVE-2020-15242",
    "nextjs--CVE-2020-5284",
    "nextjs--CVE-2021-37699",
    "nextjs--CVE-2021-39178",
    "nextjs--CVE-2021-43803",
    "nextjs--CVE-2022-21721",
    "nextjs--CVE-2022-23646",
    "nextjs--CVE-2022-36046",
    "nextjs--CVE-2023-46298",
    "nextjs--CVE-2024-34350",
    "nextjs--CVE-2024-34351",
    "nextjs--CVE-2024-39693",
    "nextjs--CVE-2024-46982",
    "nextjs--CVE-2024-47831",
    "nextjs--CVE-2024-51479",
    "nextjs--CVE-2024-56332",
    "nextjs--CVE-2025-29927",
    "nextjs--CVE-2025-30218",
    "nextjs--CVE-2025-32421",
    "nextjs--CVE-2025-48068",
    "nextjs--CVE-2025-49005",
    "nextjs--CVE-2025-49826",
    "nextjs--CVE-2025-55173",
    "nextjs--CVE-2025-57752",
    "nextjs--CVE-2025-57822",
    "nextjs--CVE-2025-59471",
    "nextjs--CVE-2025-59472",
    "nextjs--CVE-2026-27977",
    "nextjs--CVE-2026-27978",
    "nextjs--CVE-2026-27979",
    "nextjs--CVE-2026-27980",
    "nextjs--CVE-2026-29057",
    "nextjs--GHSA-5j59-xgg2-r9c4",
    "nextjs--GHSA-5vj8-3v2h-h38v",
    "nextjs--GHSA-9qr9-h5gf-34mp",
    "nextjs--GHSA-h25m-26qc-wcjf",
    "nextjs--GHSA-mwv6-3258-q52c",
    "nextjs--GHSA-w37m-7fhw-fmv9",
    "nextjs--a2c7259ddc",
    "nextjs--ae380e9321",
    "nextjs--b6cd982531",
    "nextjs--b7cd10199e",
    "nextjs--ba8c047631",
    "nextjs--c22545df7f",
    "nextjs--c28e8c0dbc",
    "nextjs--ca9b9a6983",
    "nextjs--e50a174f6a",
    "nextjs--f3892d9cb1",
    "nextjs--f553550ff7",
    "nextjs--f99bc2ccb0"
  ],
  "source_refs": [
    {
      "name": "GitHub Next.js Advisories",
      "url": "https://github.com/vercel/next.js/security/advisories",
      "kind": "html-links",
      "status": "retired",
      "bucket": "official_sources",
      "official": true
    },
    {
      "name": "GitHub Global Advisories",
      "url": null,
      "kind": "ghsa-global",
      "status": "retired",
      "bucket": "official_sources",
      "official": true
    },
    {
      "name": "OSV Next.js",
      "url": null,
      "kind": "osv-batch",
      "status": "active",
      "bucket": "official_sources",
      "official": true
    }
  ]
}