UpHeron
All vulnerabilities

npm

GHSA-673q-mjm6-r5xr

Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays

Severity
Critical
Published
22 Oct 2026
Last changed
22 Oct 2026
Added to UpHeron
23 Oct 2026
Fixed in
16.4.1
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
Next.jsnpm · osv:npm:next
  • From 16.0.0 before 16.4.1

References