next: Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service
Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service (moderate). GHSA-mcj8-r9mp-w47p, CVE-2026-94484.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?