{"id":"CVE-2024-34350","summary":"Next.js Vulnerable to HTTP Request Smuggling","details":"Next.js is a React framework that can provide building blocks to create web applications. Prior to 13.5.1, an inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses. This led to a response queue poisoning vulnerability in the affected Next.js versions. For a request to be exploitable, the affected route also had to be making use of the [rewrites](https://nextjs.org/docs/app/api-reference/next-config-js/rewrites) feature in Next.js. The vulnerability is resolved in Next.js `13.5.1` and newer.","aliases":["GHSA-77r5-gw3j-2mpf"],"modified":"2026-08-12T03:51:20.487421716Z","published":"2024-05-09T16:07:44.499Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/34xxx/CVE-2024-34350.json","cna_assigner":"GitHub_M","cwe_ids":["CWE-444"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/34xxx/CVE-2024-34350.json"},{"type":"ADVISORY","url":"https://github.com/vercel/next.js/security/advisories/GHSA-77r5-gw3j-2mpf"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34350"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/vercel/next.js","events":[{"introduced":"fb12a6dc877c5ce2f21246f4921494a1b8e356a6"},{"fixed":"0c1c7f847ee820f93bdf08e809b1e2e62230ab4b"}],"database_specific":{"cpe":"cpe:2.3:a:vercel:next.js:*:*:*:*:*:node.js:*:*","extracted_events":[{"introduced":"13.4.0"},{"fixed":"13.5.1"}],"source":["AFFECTED_FIELD","CPE_RANGE"]}}],"versions":["v13.5.1-canary.1","v13.5.1-canary.0","v13.5.0","v13.4.20-canary.41","v13.4.20-canary.40","v13.4.20-canary.39","v13.4.20-canary.38","v13.4.20-canary.37","v13.4.20-canary.35","v13.4.20-canary.36","v13.4.20-canary.34","v13.4.20-canary.33","v13.4.20-canary.32","v13.4.20-canary.31","v13.4.20-canary.29","v13.4.20-canary.28","v13.4.20-canary.27","v13.4.20-canary.26","v13.4.20-canary.25","v13.4.20-canary.24","v13.4.20-canary.23","v13.4.20-canary.22","v13.4.20-canary.21","v13.4.20-canary.20","v13.4.20-canary.19","v13.4.20-canary.18","v13.4.20-canary.17","v13.4.20-canary.16","v13.4.20-canary.15","v13.4.20-canary.14","v13.4.20-canary.13","v13.4.20-canary.12","v13.4.20-canary.11","v13.4.20-canary.10","v13.4.20-canary.9","v13.4.20-canary.8","v13.4.20-canary.7","v13.4.20-canary.6","v13.4.20-canary.5","v13.4.20-canary.4","v13.4.20-canary.3","v13.4.20-canary.2","v13.4.20-canary.1","v13.4.20-canary.0","v13.4.19","v13.4.19-canary.0","v13.4.18","v13.4.18-canary.0","v13.4.17","v13.4.17-canary.2","v13.4.17-canary.1","v13.4.17-canary.0","v13.4.16","v13.4.16-canary.1","v13.4.16-canary.0","v13.4.15","v13.4.15-canary.0","v13.4.14","v13.4.14-canary.5","v13.4.14-canary.4","v13.4.14-canary.3","v13.4.14-canary.2","v13.4.14-canary.1","v13.4.14-canary.0","v13.4.13","v13.4.13-canary.18","v13.4.13-canary.17","v13.4.13-canary.16","v13.4.13-canary.15","v13.4.13-canary.14","v13.4.13-canary.13","v13.4.13-canary.12","v13.4.13-canary.11","v13.4.13-canary.10","v13.4.13-canary.9","v13.4.13-canary.8","v13.4.13-canary.7","v13.4.13-canary.6","v13.4.13-canary.5","v13.4.13-canary.4","v13.4.13-canary.3","v13.4.13-canary.2","v13.4.13-canary.1","v13.4.13-canary.0","v13.4.12","v13.4.11","v13.4.11-canary.2","v13.4.11-canary.1","v13.4.11-canary.0","v13.4.10","v13.4.10-canary.8","v13.4.10-canary.7","v13.4.10-canary.6","v13.4.10-canary.5","v13.4.10-canary.4","v13.4.10-canary.3","v13.4.10-canary.2","v13.4.10-canary.1","v13.4.10-canary.0","v13.4.9","v13.4.9-canary.3","v13.4.9-canary.2","v13.4.8","v13.4.9-canary.1","v13.4.9-canary.0","v13.4.8-canary.15","v13.4.8-canary.14","v13.4.8-canary.13","v13.4.8-canary.12","v13.4.8-canary.11","v13.4.8-canary.10","v13.4.8-canary.9","v13.4.8-canary.8","v13.4.8-canary.7","v13.4.8-canary.6","v13.4.8-canary.5","v13.4.8-canary.4","v13.4.8-canary.3","v13.4.8-canary.2","v13.4.8-canary.1","v13.4.8-canary.0","v13.4.7","v13.4.7-canary.4","v13.4.7-canary.3","v13.4.7-canary.2","v13.4.7-canary.1","v13.4.7-canary.0","v13.4.6","v13.4.6-canary.8","v13.4.6-canary.7","v13.4.6-canary.6","v13.4.6-canary.5","v13.4.6-canary.4","v13.4.6-canary.3","v13.4.6-canary.2","v13.4.6-canary.1","v13.4.6-canary.0","v13.4.5","v13.4.5-canary.12","v13.4.5-canary.11","v13.4.5-canary.10","v13.4.5-canary.9","v13.4.5-canary.8","v13.4.5-canary.7","v13.4.5-canary.6","v13.4.5-canary.5","v13.4.5-canary.4","v13.4.5-canary.3","v13.4.5-canary.2","v13.4.5-canary.1","v13.4.5-canary.0","v13.4.4","v13.4.4-canary.13","v13.4.4-canary.12","v13.4.4-canary.11","v13.4.4-canary.10","v13.4.4-canary.9","v13.4.4-canary.8","v13.4.4-canary.7","v13.4.4-canary.6","v13.4.4-canary.5","v13.4.4-canary.4","v13.4.4-canary.3","v13.4.4-canary.2","v13.4.4-canary.1","v13.4.4-canary.0","v13.4.3","v13.4.3-canary.3","v13.4.3-canary.2","v13.4.3-canary.1","v13.4.3-canary.0","v13.4.2","v13.4.2-canary.6","v13.4.2-canary.5","v13.4.2-canary.4","v13.4.2-canary.3","v13.4.2-canary.2","v13.4.2-canary.1","v13.4.2-canary.0","v13.4.1","v13.4.1-canary.2","v13.4.1-canary.1","v13.4.1-canary.0","v13.4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-34350.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}]}