All vulnerabilities

npm

CVE-2024-47831

Denial of Service condition in Next.js image optimization

Severity: Medium 5.9
Published: 14 Oct 2024
Last changed: 10 Sept 2026
Added to UpHeron: 14 Oct 2026
Fixed in: 14.2.7
Also known as: GHSA-g77x-44xx-532m
Sources: OSV.dev and GitHub

Affected software

Software	Affected versions
Next.jsnpm · `osv:npm:next`	From 10.0.0 before 14.2.7

References

CVE.org https://www.cve.org/CVERecord?id=CVE-2024-47831
GitHub Advisory Database https://github.com/advisories/GHSA-g77x-44xx-532m