Tag: Next.js 204 response vulnerability

What is the Next.js cache poisoning vulnerability (CVE-2025-49826) and how does it lead to Denial of Service (DoS) attacks?

A serious security flaw (CVE-2025-49826) was discovered in Next.js versions 15.1.0 to 15.1.8, allowing attackers to poison the cache and serve blank pages to users. This vulnerability impacts sites using Incremental S...