logo

Database

Improper resource allocation In thunderbird

Description

A flaw was found in Next.js. An attacker sending specially crafted requests to a Next.js application utilizing the App Router with Server Actions configured to use the Edge runtime can cause excessive memory consumption. This can lead to a denial of service (DoS) due to resource exhaustion.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2026-646462. NVD-2026-646463. OSV-2026-646464. GHSA-4c39-4ccg-62r35. GCVE-2026-64646

References

1. https://github.com/vercel/next.js/security/advisories/GHSA-4c39-4ccg-62r32. https://github.com/vercel/next.js/commit/57c31f724d746e86a9e8b92aa8be538a922446a43. https://github.com/vercel/next.js/commit/9a4651e754f70b12e397694ffc41f44c3ba8cc174. https://github.com/vercel/next.js/releases/tag/v15.5.215. https://github.com/vercel/next.js/releases/tag/v16.2.11

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.