- Community aggregator
- Country: United States
CVE-2026-29057 — HTTP Request Smuggling via Next.js Rewrites
Overview Item Detail CVE ID CVE-2026-29057 Affected Next.js (self-hosted deployments using rewrites() to proxy to an external backend) Vulnerable versions >= 9.5.0, < 15.5.13 and >= 16.0.0-beta.0, < 16.1.7 Patched versions 15.5.13 , 16.1.7 CVSS 4.0 6.3 (Moderate) CWE CWE-444 (Inconsistent…