UpHeron
All vulnerabilities

npm

CVE-2024-51479

Next.js authorization bypass vulnerability

Severity
High 7.5
Published
17 Dec 2024
Last changed
10 Sept 2025
Added to UpHeron
14 Oct 2026
Fixed in
14.2.15
Also known as
GHSA-7gfc-8cq8-jh5f
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
Next.jsnpm · osv:npm:next
  • From 9.5.5 before 14.2.15

References