next known bugs

npm

3 known bugs in next, with affected versions, fixes and workarounds. Sourced from upstream issue trackers.

3
bugs
Known bugs
SeverityAffectedFixed inTitleStatusSource
high14.1.014.1.1
Server Action redirect bypasses middleware
CVE-2024-34351 — a redirect inside a Server Action can bypass authentication middleware. Upgrade to 14.1.1 or later.
closedgithub:#62600
medium15.0.015.0.1
next/image with remotePatterns and query strings returns 404 on edge
Images matched by remotePatterns that included query strings in the src returned 404 when deployed to the Edge runtime in 15.0.0. Fixed in 15.0.1.
closedgithub:#71755
low15.1.0 - 15.1.215.1.3
Server Action with useActionState loses state on navigation
Calling a Server Action via useActionState and then navigating with next/link reset the returned state. Fixed in 15.1.3.
closedgithub:#74523
API access

Get this data programmatically \u2014 free, no authentication.

curl https://depscope.dev/api/bugs/npm/next