CVE-2026-64646

cvss 5.3

Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the Edge runtime. This issue has been fixed in versions 15.5.21 and 16.2.11.

open on the board →primary source ↗

signal timeline

Nothing is referencing this right now. Feeds are snapshots of the present, so a quiet timeline means quiet today — not that nothing ever happened.

connections

npm/next · affected-by

first seen 22d ago · last seen 3d ago

intelyard daily

One short email each weekday: what mattered in tech, written from source data and checked by a human. No account needed, one-click unsubscribe, and we never sell or share the address.