CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
32.8%
When specific requests are made to the Next.js server it can cause an unhandledRejection
in the server which can crash the process to exit in specific Node.js versions with strict unhandledRejection
handling.
Affected: All of the following must be true to be affected by this CVE
unhandledRejection
exitingNot affected: Deployments on Vercel (vercel.com) are not affected along with similar environments where next-server
isnโt being shared across requests.