CVE-2026-44582Published
Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 and 16.2.5, React Server Component responses can be vulnerable to cache poisoning in deployments that rely on shared caches with insufficie…
Exact source revision recorded 27 Oct 2026 11:12:17 UTC. It does not establish the source's current position. Latest evidence.
nvd · CVE-2026-44582
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.