Approved changes feed: RSS · Atom

cpe:2.3:a:vercel:next.js:13.4.20:canary10:*:*:*:node.js:*:*

part: a version: 13.4.20 update: canary10

VendorVercel (5676cb1a-0d7f-5c57-9405-b569f0c482e7)
ProductNext.Js (291cbef7-fa11-595c-86e3-5c00f9c5cf94)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/vercel/next.js purl2cpe 2026-06-01 10:11:38.621126
pkg:sourceforge/next-js.mirror purl2cpe 2026-06-01 10:11:38.621128

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46298 vulnerable 2026-06-08 06:12:44.629496 Details available
Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN.
Published: 2023-10-22T00:00:00.000Z
Updated: 2024-09-12T17:50:34.208Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.