GHSA-673q-mjm6-r5xr

GHSA-673q-mjm6-r5xr · Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays

This page contains facts from public vulnerability sources. Check the original advisory before updating.

## Impact A vulnerability in applications using App router with Cache Component can lead to remote code execution. The application needs to have a `use cache` function that returns multiple typed arrays. ## Workaround There is no known workaround for affected applications with such `use cache` functions. You should upgrade immediately even if your application does not have similar functions.

CVSS 9.5 · Critical · Fix available

Published

2026-10-22T16:42:31Z

Updated

2026-10-22T17:00:04.201859111Z

Stack: node

Check your server →