CVE-2026-64649
HIGH SEVERITYVulnerability Description
Next.js: Server-Side Request Forgery in Server Actions on custom servers
Vulnerability Details
Published Date
Last Modified
Source
GitHub
Vendor
npm
Product
next
External References
- https://github.com/vercel/next.js/security/advisories/GHSA-89xv-2m56-2m9x
- https://github.com/vercel/next.js/commit/b51206321854193208c0805ba42acc49287f942b
- https://github.com/vercel/next.js/commit/e3e5666ccead3a15162793d697af5e48b7cc0498
- https://github.com/vercel/next.js/releases/tag/v15.5.21
- https://github.com/vercel/next.js/releases/tag/v16.2.11
- https://github.com/advisories/GHSA-89xv-2m56-2m9x
Discussion (0)
Add Comment
No comments yet. Be the first!