next: Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname (high). GHSA-p9j2-gv94-2wf4, CVE-2026-64645.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?