CVE-2026-64647

Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

open on the board →primary source ↗

signal timeline

next affected by CVE-2026-64647
OSV.dev · 21d ago

connections

npm/next · affected-by

first seen 21d ago · last seen 10m ago

intelyard daily

One short email each weekday: what mattered in tech, written from source data and checked by a human. No account needed, one-click unsubscribe, and we never sell or share the address.