Next.js Denial of Service Vulnerability in App Router using Server Actions
A denial of service vulnerability exists in Next.js applications using App Router with at least one Server Action. Crafted requests can lead to excessive CPU usage, blocking further requests. Affected versions include Next.js 13.0.0 to 15.5.20 and 16.0.0 to 16.2.10.