疑似Oday
Next.js is vulnerable to cache poisoning through the x-middleware-prefetch and x-invoke-status headers. This can result in DoS by serving an empty JSON object or error page instead of the intended content, affecting SSR responses.
id: next-js-cache-poisoning
info:
name: Next.js Cache Poisoning
author: Ice3man543
severity:
...