-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| next | npm | = 12.2.3 | 12.2.4 |
JavaScriptJavaScriptMiggo AIRoot Cause AnalysisThe vulnerability stems from unhandled promise rejections in edge runtime and server request handling paths. The v12.2.4 release specifically mentions fixing edge runtime rejections (#39091), indicating runEdgeFunction was a source of uncaught exceptions. The Server.handleRequest is implicated as the entry point for custom server implementations where these rejections would bubble up. Both functions would appear in stack traces when processing malicious requests that trigger rejected promises, matching the described crash scenario.
Ongoing coverage of React2Shell