UpHeron
All vulnerabilities

npm

CVE-2024-46982

Next.js Cache Poisoning

Severity
High 7.5
Published
17 Sept 2024
Last changed
10 Sept 2026
Added to UpHeron
14 Oct 2026
Fixed in
13.5.7, 14.2.10
Also known as
GHSA-gp8f-8m3g-qvj9
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
Next.jsnpm · osv:npm:next
  • From 13.5.1 before 13.5.7
  • From 14.0.0 before 14.2.10

References