Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-39693

Next.js Denial of Service (DoS) condition

Description

Next.js is a React framework. A Denial of Service (DoS) condition was identified in Next.js. Exploitation of the bug can trigger a crash, affecting the availability of the server. his vulnerability was resolved in Next.js 13.5 and later.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

vercel next.js

  • >= 13.3.1, < 13.5.0affected

References