Practical Security Guides For Your Team

Your website uses Next.js, a popular framework for building web apps. A flaw in how it caches (stores and reuses) images means that a private image loaded by one logged-in user could be accidentally served to a different user who shouldn't see it. Think of it like a photo printing kiosk that accidentally hands your photos to the next person in line. This only affects sites that serve different images to different users based on who is logged in.

Your application uses a JavaScript library called Axios to make web requests. A flaw in one of its supporting components means that if your app routes traffic through an authenticated proxy server, those proxy login credentials could be accidentally sent to the wrong destination when a redirect occurs. This only affects you if your app uses proxy authentication — if it doesn't, you're not at risk.