VYPR
← All advisories
Low severity3.7OSV Advisory· Published Jul 27, 2026

next: Next.js: Information disclosure via server-side request caching

CVE-2026-64647

Description

next: Next.js: Information disclosure via server-side request caching

Affected products

2
  • Vercel/Next.jsOSV2 versions
    v15.5.20, v16.2.10, v15.5.20-canary.0, …+ 1 more
    • (no CPE)range: v15.5.20, v16.2.10, v15.5.20-canary.0, …
    • (no CPE)

Patches

Vulnerability mechanics

News mentions

1