npm/next CVE-2024-46982: high 7.5, EPSS 59.18%
Next.js Cache Poisoning
Action: Upgrade next to 13.5.7 or later.
npm i next@13.5.7npm i next@14.2.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 13.5.1 | 13.5.7 | - |
| 14.0.0 | 14.2.10 | - |
Fixed versions
| 13.5.7 | 14.2.10 |
Sources
- osv: GHSA-gp8f-8m3g-qvj9
- https://github.com/vercel/next.js/security/advisories/GHSA-gp8f-8m3g-qvj9
- https://nvd.nist.gov/vuln/detail/CVE-2024-46982
- https://github.com/vercel/next.js/commit/7ed7f125e07ef0517a331009ed7e32691ba403d3
- https://github.com/vercel/next.js/commit/bd164d53af259c05f1ab434004bcfdd3837d7cda
- https://github.com/vercel/next.js
CVE-2024-46982 · published · modified · JSON