Lucene search
K

Next.js has Unbounded Memory Consumption via PPR Resume Endpoint

🗓️ 28 Jan 2026 15:20:55Reported by GitHub Advisory DatabaseType 
github
 github
🔗 github.com👁 31 Views

Next.js minimal mode PPR resume endpoint enables memory exhaustion via unauthenticated POSTs and unbounded buffering/decompression.

Related
Detection
Refs
Vulners
Node
nextnextRange15.5.1-canary.015.5.1-canary.39npm
OR
nextnextRange15.4.2-canary.015.4.2-canary.56npm
OR
nextnextRange15.4.0-canary.015.4.0-canary.130npm
OR
nextnextRange15.3.1-canary.015.3.1-canary.15npm
OR
nextnextRange15.3.0-canary.015.3.0-canary.46npm
OR
nextnextRange15.2.2-canary.015.2.2-canary.7npm
OR
nextnextRange15.2.1-canary.015.2.1-canary.6npm
OR
nextnextRange15.2.0-canary.015.2.0-canary.77npm
OR
nextnextRange15.1.1-canary.015.1.1-canary.27npm
OR
nextnextRange15.0.4-canary.015.0.4-canary.52npm
OR
nextnextRange15.0.3-canary.015.0.3-canary.9npm
OR
nextnextRange15.0.2-canary.015.0.2-canary.11npm
OR
nextnextRange15.0.1-canary.015.0.1-canary.3npm
OR
nextnextRange15.0.0-canary.015.0.0-canary.205npm
OR
nextnextRange15.6.0-canary.015.6.0-canary.61npm
OR
nextnextRange16.0.0-beta.016.1.5npm

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation