UpHeron
All vulnerabilities

npm

CVE-2024-34350

Next.js Vulnerable to HTTP Request Smuggling

Severity
High 7.5
Published
9 May 2024
Last changed
10 Sept 2026
Added to UpHeron
14 Oct 2026
Fixed in
13.5.1
Also known as
GHSA-77r5-gw3j-2mpf
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
Next.jsnpm · osv:npm:next
  • From 13.4.0 before 13.5.1

References