highnextCVE-2026-94482
Next.js: Denial of Service in App Router using Server Actions
Affected versions
>= 13.0.0, <= 15.5.27, fixed in 15.5.28>= 16.0.0, <= 16.4.0, fixed in 16.4.1
Published 2026-10-22. Last checked 2026-11-01. Read the source advisory