Summaries of CVE-2025-59471 and CVE-2025-59472
Two denial-of-service vulnerabilities were discovered in self-hosted Next.js applications that can cause server crashes through memory exhaustion under specific configurations.
Josh Story, Andy Riancho, and 1 other