Excessive Iteration Affecting next package, versions >=13.0.0 <15.5.28>=16.0.0 <16.4.1
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-JS-NEXT-21246253
- published19 Oct 2026
- disclosed19 Oct 2026
- creditUnknown
Introduced: 19 Oct 2026
New CVE NOT AVAILABLE CWE-834 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade next to version 15.5.28, 16.4.1 or higher.
Overview
next is a react framework.
Affected versions of this package are vulnerable to Excessive Iteration via a crafted request using App Router with at least one Server Action which can lead to excessive CPU usage blocking processing of further requests in the same process.