Next.js .next/ limited path traversal

Description

A directory traversal vulnerability exists in versions of Next.js prior to 9.3.2. Unauthenticated Attackers could craft special requests to access files in the dist directory (.next). Outside of the dist directory, this has no effect (.next). Unless your application contains other assets in the dist directory, the dist directory should solely contain build assets. This issue has been addressed in version 9.3.2.

Recommendation

• Update Next.js to the latest version