Most recent entries from all

bdu:2024-08508

2026-10-09T03:54:10.342157+00:00

bdu:2024-08508

certfr-2024-avi-1015 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

2026-10-09T03:54:10.342191+00:00

certfr-2024-avi-1015

EUVD-2026-195523

2026-10-09T03:54:10.342210+00:00

EUVD-2026-195523

fkie_cve-2024-47831

2026-10-09T03:54:10.342222+00:00

Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service (DoS) condition which could lead to excessive CPU consumption. Neither the `next.config.js` file that is configured with `images.unoptimized` set to `true` or `images.loader` set to a non-default value nor the Next.js application that is hosted on Vercel are affected. This issue was fully patched in Next.js `14.2.7`. As a workaround, ensure that the `next.config.js` file has either `images.unoptimized`, `images.loader` or `images.loaderFile` assigned.

GHSA-g77x-44xx-532m — Denial of Service condition in Next.js image optimization

2026-10-09T03:54:10.342252+00:00

Affected: npm: next

### Impact The image optimization feature of Next.js contained a vulnerability which allowed for a potential Denial of Service (DoS) condition which could lead to excessive CPU consumption.

**Not affected:** - The `next.config.js` file is configured with `images.unoptimized` set to `true` or `images.loader` set to a non-default value. - The Next.js application is hosted on Vercel.

### Patches This issue was fully patched in Next.js `14.2.7`. We recommend that users upgrade to at least this version.

### Workarounds Ensure that the `next.config.js` file has either `images.unoptimized`, `images.loader` or `images.loaderFile` assigned.

#### Credits Brandon Dahler (brandondahler), AWS Dimitrios Vlastaras