All vulnerabilities

npm

CVE-2023-46298

Next.js missing cache-control header may lead to CDN caching empty reply

Severity
Low
Published
22 Oct 2023
Last changed
8 Nov 2023
Added to UpHeron
14 Oct 2026
Fixed in
13.4.20-canary.13
Also known as
GHSA-c59h-r6p8-q9wc
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
Next.jsnpm · osv:npm:next
  • From 0.9.9 before 13.4.20-canary.13

References