https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 03:53:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-08508 bdu:2024-08508 https://cve.radiocsirt.org/vuln/bdu:2024-08508 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1015 certfr-2024-avi-1015 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1015 https://cve.radiocsirt.org/vuln/euvd-2026-195523 EUVD-2026-195523 https://cve.radiocsirt.org/vuln/euvd-2026-195523 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47831 <p>Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service (DoS) condition which could lead to excessive CPU consumption. Neither the `next.config.js` file that is configured with `images.unoptimized` set to `true` or `images.loader` set to a non-default value nor the Next.js application that is hosted on Vercel are affected. This issue was fully patched in Next.js `14.2.7`. As a workaround, ensure that the `next.config.js` file has either `images.unoptimized`, `images.loader` or `images.loaderFile` assigned.</p> <p>Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service (DoS) condition which could lead to excessive CPU consumption. Neither the `next.config.js` file that is configured with `images.unoptimized` set to `true` or `images.loader` set to a non-default value nor the Next.js application that is hosted on Vercel are affected. This issue was fully patched in Next.js `14.2.7`. As a workaround, ensure that the `next.config.js` file has either `images.unoptimized`, `images.loader` or `images.loaderFile` assigned.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-47831 https://cve.radiocsirt.org/vuln/ghsa-g77x-44xx-532m <p><strong>Affected:</strong> npm: next</p> <p>### Impact The image optimization feature of Next.js contained a vulnerability which allowed for a potential Denial of Service (DoS) condition which could lead to excessive CPU consumption.</p> <p>**Not affected:** - The `next.config.js` file is configured with `images.unoptimized` set to `true` or `images.loader` set to a non-default value. - The Next.js application is hosted on Vercel.</p> <p>### Patches This issue was fully patched in Next.js `14.2.7`. We recommend that users upgrade to at least this version.</p> <p>### Workarounds Ensure that the `next.config.js` file has either `images.unoptimized`, `images.loader` or `images.loaderFile` assigned.</p> <p>#### Credits Brandon Dahler (brandondahler), AWS Dimitrios Vlastaras</p> <p><strong>Affected:</strong> npm: next</p> <p>### Impact The image optimization feature of Next.js contained a vulnerability which allowed for a potential Denial of Service (DoS) condition which could lead to excessive CPU consumption.</p> <p>**Not affected:** - The `next.config.js` file is configured with `images.unoptimized` set to `true` or `images.loader` set to a non-default value. - The Next.js application is hosted on Vercel.</p> <p>### Patches This issue was fully patched in Next.js `14.2.7`. We recommend that users upgrade to at least this version.</p> <p>### Workarounds Ensure that the `next.config.js` file has either `images.unoptimized`, `images.loader` or `images.loaderFile` assigned.</p> <p>#### Credits Brandon Dahler (brandondahler), AWS Dimitrios Vlastaras</p> https://cve.radiocsirt.org/vuln/ghsa-g77x-44xx-532m