CVE-2026-64645
HIGH SEVERITYVulnerability Description
Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
Vulnerability Details
Published Date
Last Modified
Source
GitHub
Vendor
npm
Product
next
External References
- https://github.com/vercel/next.js/security/advisories/GHSA-p9j2-gv94-2wf4
- https://github.com/vercel/next.js/commit/35f501357e9b0fe7c950b0d6aa8fcf5343f707e9
- https://github.com/vercel/next.js/commit/d3033266c6dff23f7be71e19341fe3a8c6e2c599
- https://github.com/vercel/next.js/releases/tag/v15.5.21
- https://github.com/vercel/next.js/releases/tag/v16.2.11
- https://github.com/advisories/GHSA-p9j2-gv94-2wf4
Discussion (0)
Add Comment
No comments yet. Be the first!