All vulnerabilities

npm

CVE-2024-39693

Next.js Denial of Service (DoS) condition

Severity: High 7.5
Published: 10 Jul 2024
Last changed: 10 Sept 2026
Added to UpHeron: 14 Oct 2026
Fixed in: 13.5.0
Also known as: GHSA-fq54-2j52-jc42
Sources: OSV.dev and GitHub

Affected software

Software	Affected versions
Next.jsnpm · `osv:npm:next`	From 13.3.1 before 13.5.0

References

CVE.org https://www.cve.org/CVERecord?id=CVE-2024-39693
GitHub Advisory Database https://github.com/advisories/GHSA-fq54-2j52-jc42