Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-39693

Fixed upstream EPSS <1%CVSS 7.5

Next.js is a React framework. A Denial of Service (DoS) condition was identified in Next.js. Exploitation of the bug can trigger a crash, affecting the availability of the server. his vulnerability was resolved in Next.js 13.5 and later.

Published 2024-07-10 · CVE record · OSV

Products: vercel next.js

Fixed upstream

EcosystemPackageFixed in
npmnext13.5.0