PT-2026-135023

Published

2026-10-22

·

Updated

2026-10-22

Description by

CVSS 4.0
9.5
Critical
MetricsAV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:N

Impact

A vulnerability in applications using App router with Cache Component can lead to remote code execution. The application needs to have a use cache function that returns multiple typed arrays.

Workaround

There is no known workaround for affected applications with such use cache functions. You should upgrade immediately even if your application does not have similar functions.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-673Q-MJM6-R5XR
Found an issue in the description? Have something to add? Feel free to write us 👾