Cache Poisoning

Next.js is vulnerable to Cache Poisoning. The vulnerability is due to improper caching of HTTP 204 responses for static pages, which allows an attacker to poison the cache and cause the 204 response to be served to all users attempting to access the affected page...

CVE-2025-49826: Inconsistent Interpretation of HTTP Requests

Next.js is a React framework for building full-stack web applications. From versions 15.0.4-canary.51 to before 15.1.8, a cache poisoning bug leading to a Denial of Service DoS condition was found in Next.js. This issue does not impact customers hosted on Vercel. Under certain conditions, this...

Mozilla Foundation Security Advisory 2010-45

Mozilla Foundation Security Advisory 2010-45 Title: Multiple location bar spoofing vulnerabilities Impact: Moderate Announced: July 20, 2010 Reporter: Michal Zalewski, Jordi Chancel Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.7 Firefox 3.5.11 SeaMonkey 2.0.6 Description Google security...