CVE-2024-34351
1 advisory.
npm/next CVE-2024-34351: high 7.5, EPSS 5.45%
Next.js Server-Side Request Forgery in Server Actions
Action: Upgrade next to 14.1.1 or later.
npm i next@14.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 13.4.0 | 14.1.1 | - |
Fixed versions
| 14.1.1 |
Sources
- osv: GHSA-fr5h-rqp8-mj6g
- https://github.com/vercel/next.js/security/advisories/GHSA-fr5h-rqp8-mj6g
- https://nvd.nist.gov/vuln/detail/CVE-2024-34351
- https://github.com/vercel/next.js/pull/62561
- https://github.com/vercel/next.js/commit/8f7a6ca7d21a97bc9f7a1bbe10427b5ad74b9085
- https://github.com/vercel/next.js
CVE-2024-34351 · published · modified · JSON