{"action":"Upgrade next to 13.5.7 or later.","affected":[{"fixed":"13.5.7","introduced":"13.5.1"},{"fixed":"14.2.10","introduced":"14.0.0"}],"component":"next","cve_ids":["CVE-2024-46982"],"ecosystem":"npm","epss":0.5918,"exploited":false,"fixed_versions":["13.5.7","14.2.10"],"ghsa_id":"GHSA-gp8f-8m3g-qvj9","id":"tcs_01M5KFS5SYRVBA7TDTWJZAVM1B","modified_at":"2026-09-10T03:50:18.787070679Z","published_at":"2024-09-17T21:58:09Z","references":["https://osv.dev/vulnerability/GHSA-gp8f-8m3g-qvj9","https://github.com/vercel/next.js/security/advisories/GHSA-gp8f-8m3g-qvj9","https://nvd.nist.gov/vuln/detail/CVE-2024-46982","https://github.com/vercel/next.js/commit/7ed7f125e07ef0517a331009ed7e32691ba403d3","https://github.com/vercel/next.js/commit/bd164d53af259c05f1ab434004bcfdd3837d7cda","https://github.com/vercel/next.js"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gp8f-8m3g-qvj9","url":"https://osv.dev/vulnerability/GHSA-gp8f-8m3g-qvj9"}],"summary":"Next.js Cache Poisoning"}