Sca-Bypass โ€” PoC Archivehttps://poc.intelseclab.com/tags/sca-bypass/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Next.js Vendored picomatch Vulnerable Dependency โ€” CVE-2026-33671https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33671-nextjs-vendored-picomatch-dep/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33671-nextjs-vendored-picomatch-dep/High severity โ€” web ยท CVE-2026-33671. Status: PoC. Affects: Next.js 16.2.4 (bundles picomatch 4.0.3 at node_modules/next/dist/compiled/picomatch/). Tags: nextjs, picomatch, vendored-dependency, supply-chain, sca-bypass, trivy, nodejs, dependency-scanning.webHighnextjspicomatchvendored-dependencysupply-chainsca-bypasstrivynodejsdependency-scanning