CVE-2026-45109

Updated on 11 May 2026

Severity

7.5 High severity

Details

CVSS score
7.5
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Overview

About vulnerability

Impact

It was found that the fix addressing CVE-2026-44575 did not apply to middleware.ts with Turbopack. Refer to CVE-2026-44575 for further details.

References

Details

Affected product:
Next.js
Affected packages:
create-next-app @ 16.0.6 (+33 more)