tocsin

npm/next: high 7.5

Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components

Action: Upgrade next to 15.0.8 or later.

npm i next@15.0.8
npm i next@15.1.12
npm i next@15.2.9
npm i next@15.3.9
npm i next@15.4.11
npm i next@15.5.10
npm i next@15.6.0-canary.61
npm i next@16.0.11
npm i next@16.1.5

Affected

introducedfixedlast affected
13.0.015.0.8-
15.1.1-canary.015.1.12-
15.2.0-canary.015.2.9-
15.3.0-canary.015.3.9-
15.4.0-canary.015.4.11-
15.5.1-canary.015.5.10-
15.6.0-canary.015.6.0-canary.61-
16.0.0-beta.016.0.11-
16.1.0-canary.016.1.5-

Fixed versions

15.0.815.1.1215.2.915.3.915.4.1115.5.1015.6.0-canary.6116.0.1116.1.5

Sources

published · modified · JSON