Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/01 3:17 p.m.•14 views

CVE-2026-103004

Next.js versions from 16.3.0 to 16.3.7 warm use cache handlers using next/root-params and can leak their return value to pages with different root params. With Cache Components enabled cacheComponents: true, a 'use cache' function that calls another 'use cache' function that reads a root param ca...

6.3CVSS0.00324EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/01 2:50 p.m.•11 views

CVE-2026-103004

Next.js versions 16.3.0 to 16.3.7 are vulnerable to a cache leak when use cache handlers access next/root-params with Cache Components enabled. The root cause is an incorrect cache key generation: if an inner use cache function reads a root param and is served from an existing entry, the enclosin...

6.3CVSS5.6AI score0.00324EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/01 2:50 p.m.•34 views

CVE-2026-103004 next.js cache leak on warm `use cache` handlers accessing root param

Next.js versions from 16.3.0 to 16.3.7 warm use cache handlers using next/root-params and can leak their return value to pages with different root params. With Cache Components enabled cacheComponents: true, a 'use cache' function that calls another 'use cache' function that reads a root param ca...

6.3CVSS0.00324EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/01 2:50 p.m.•3 views

CVE-2026-103004 next.js cache leak on warm `use cache` handlers accessing root param

Next.js versions from 16.3.0 to 16.3.7 warm use cache handlers using next/root-params and can leak their return value to pages with different root params. With Cache Components enabled cacheComponents: true, a 'use cache' function that calls another 'use cache' function that reads a root param ca...

6.3CVSS5.6AI score0.00324EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/01 2:50 p.m.•8 views

EUVD-2026-90872

Next.js versions from 16.3.0 to 16.3.7 warm use cache handlers using next/root-params and can leak their return value to pages with different root params. With Cache Components enabled cacheComponents: true, a 'use cache' function that calls another 'use cache' function that reads a root param ca...

6.3CVSS5.6AI score0.00324EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2026-103004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js versions from 16.3.0 to 16.3.7 warm use cache handlers using next/root-params and can leak their return value to pages with different root params. With...

6.3CVSS5.7AI score0.00324EPSS
SaveExploits0References2
Rows per page
Query Builder