UpHeron
All vulnerabilities

npm

CVE-2024-34351

Next.js Server-Side Request Forgery in Server Actions

Severity
High 7.5
Published
9 May 2024
Last changed
10 Sept 2026
Added to UpHeron
14 Oct 2026
Fixed in
14.1.1
Also known as
GHSA-fr5h-rqp8-mj6g
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
Next.jsnpm · osv:npm:next
  • From 13.4.0 before 14.1.1

References