next: Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades
Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades (high). GHSA-c4j6-fc7j-m34r, CVE-2026-44578.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?