CVE-2024-34350
1 advisory.
npm/next CVE-2024-34350: high 7.5
Next.js Vulnerable to HTTP Request Smuggling
Action: Upgrade next to 13.5.1 or later.
npm i next@13.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 13.4.0 | 13.5.1 | - |
Fixed versions
| 13.5.1 |
Sources
- osv: GHSA-77r5-gw3j-2mpf
- https://github.com/vercel/next.js/security/advisories/GHSA-77r5-gw3j-2mpf
- https://nvd.nist.gov/vuln/detail/CVE-2024-34350
- https://github.com/vercel/next.js/commit/44eba020c615f0d9efe431f84ada67b81576f3f5
- https://github.com/vercel/next.js
- https://github.com/vercel/next.js/compare/v13.5.0...v13.5.1
CVE-2024-34350 · published · modified · JSON