tag
XSS
Critical
FirefUXSS: Universal XSS in Firefox Focus for iOS via Redirect-Scheme Validation Race Condition
Firefox Focus for iOS
unpatched
Medium
Next.js CSP Nonce Cache-Poisoned XSS (CVE-2026-44581)
CVE-2026-44581·
Next.js App Router applications using CSP nonces
patched
Medium
Next.js beforeInteractive Script XSS (CVE-2026-44580)
CVE-2026-44580·
Next.js applications using next/script with strategy="beforeInteractive"
patched