ROOT-APP-NPM-CVE-2024-34350 CVE-2024-34350 in next - Patched by Root

Root has patched CVE-2024-34350 in the next package for Root:npm. Multiple fixed versions available...

CVE-2024-34350

creationtimestamp| type| source ---|---|--- 2024-05-11 10:13:49+00:00| seen| https://t.me/HackingInsights/286 2024-05-13 08:31:07+00:00| seen| https://t.me/cyberbannewsir/11846...

24social-ui (>=1.0.0, <=1.0.5), @90pixel/okr (0.1.0) +2105 more potentially affected by CVE-2024-34350 via next (>=13.4.0, <=13.4.20-canary.40)

next NPM version =13.4.0, =1.0.0, =0.1.23, =0.0.2, =1.0.0, =0.0.1, =0.1.0, =0.1.1, =1.1.2, =1.0.0, =0.1.6, =0.1.22 and more Source cves: CVE-2024-34350 Source advisory: OSV:GHSA-77R5-GW3J-2MPF...

CVE-2024-34350

CVE-2024-34350 affects Next.js (React framework). The issue arises from inconsistent interpretation of a crafted HTTP request, causing a request to be treated as both a single request and two separate requests, which can poison the response queue. Exploitation requires the affected route to use t...