CVE-2024-39693: Next.js Denial of Service (DoS) condition

July 10, 2024 (updated November 6, 2024)

A Denial of Service (DoS) condition was identified in Next.js. Exploitation of the bug can trigger a crash, affecting the availability of the server.

This vulnerability can affect all Next.js deployments on the affected versions.

References

github.com/advisories/GHSA-fq54-2j52-jc42
github.com/vercel/next.js
github.com/vercel/next.js/security/advisories/GHSA-fq54-2j52-jc42
nvd.nist.gov/vuln/detail/CVE-2024-39693

Code Behaviors & Features

Detect and mitigate CVE-2024-39693 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →