3llm (0.0.1), @3bitmt/3bit-sidebar-dashboard (1.1.4) +330 more potentially affected by CVE-2025-49826 via next (>=15.0.4, <=15.1.7)

next NPM version =15.0.4, =0.0.3-alpha-20241208090947-7fef7769a72aeb2895978b4e7647afdba519b103, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.1, =0.1.1, =0.1.0, =0.1.22 and more Source cves: CVE-2025-49826 Source advisory: OSV:GHSA-67RR-84XM-4C7R...

Next.JS vulnerability can lead to DoS via cache poisoning

Summary A vulnerability affecting Next.js has been addressed. It impacted versions 15.0.4 through 15.1.8 and involved a cache poisoning bug leading to a Denial of Service DoS condition. Under certain conditions, this issue may allow a HTTP 204 response to be cached for static pages, leading to th...