| Package | Affected versions | Patched versions |
|---|---|---|
| next.js | = 13.4.20< 13.4.20 | 13.4.20 |
| next | ≥ 0.9.9, < 13.4.20-canary.13 | 13.4.20-canary.13 |
Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN. Cloudflare considers these requests cacheable assets.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free