highnextCVE-2026-64641
Next.js: Denial of Service in App Router using Server Actions
Affected versions
>= 13.0.0, < 15.5.21, fixed in 15.5.21>= 16.0.0, < 16.2.11, fixed in 16.2.11
Published 2026-07-22. Last checked 2026-11-01. Read the source advisory