Cloudanix VulnDB

GHSA-5f7q-jpqc-wp7h

Medium · 5.9

CVSS

5.9

EPSS

—

Published

Jan 28, 2026

CISA due date

—

The record

Next.js has Unbounded Memory Consumption via PPR Resume Endpoint

Affected packages

Ecosystem Package Introduced Fixed
npm next 15.0.0-canary.0 No fix
npm next 15.0.0-canary.0 15.6.0-canary.61
npm next 15.0.1-canary.0 No fix
npm next 15.0.2-canary.0 No fix
npm next 15.0.3-canary.0 No fix
npm next 15.0.4-canary.0 No fix
npm next 15.1.1-canary.0 No fix
npm next 15.2.0-canary.0 No fix
npm next 15.2.1-canary.0 No fix
npm next 15.2.2-canary.0 No fix
npm next 15.3.0-canary.0 No fix
npm next 15.3.1-canary.0 No fix
npm next 15.4.0-canary.0 No fix
npm next 15.4.2-canary.0 No fix
npm next 15.5.1-canary.0 No fix
npm next 15.6.0-canary.0 15.6.0-canary.61
npm next 16.0.0-beta.0 16.1.5
Chainguard jitsucom-jitsu-console 0 2.11.0-r14
Chainguard langfuse-3 0 3.150.0-r0
Chainguard langfuse-fips-3 0 3.150.0-r0
Wolfi jitsucom-jitsu-console 0 2.11.0-r14
Wolfi langfuse-3 0 3.150.0-r0

Related vulnerabilities