123-x-ed-eied (>=1.0.5 <=1.0.6), 24social-ui (>=1.0.0 <=1.0.5) +4088 more potentially affected by CVE-2023-46298 via next (>=10.0.0 <=13.4.2)

next NPM version =10.0.0, =1.0.5, =1.0.0, =1.0.51, =0.0.23, =1.6.1, =0.3.0, =0.0.1, =0.0.1, =0.2.105, =0.2.50, =2.0.0, =2.3.4 and more Source cves: CVE-2023-46298 Source advisory: OSV:GHSA-C59H-R6P8-Q9WC...

CVE-2023-46298

CVE-2023-46298 affects Next.js (pre-13.4.20-canary.13) where a missing cache-control header can allow empty prefetch responses to be cached by a CDN, enabling a denial of service for users accessing the same URL through that CDN. The available documents identify the affected product and the root ...