[GHSA-77r5-gw3j-2mpf] Next.js Vulnerable to HTTP Request Smuggling

[mistressxalexis]

Updates

• Affected products
• CVSS v3
• Severity

Comments
Y

[yhidad31]

Hi @mistressxalexis, I see your CVSS suggestion CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N. Can you explain the rationale for changing Attack Complexity from H to L, Scope from C to U, Confidentiality from L to N and Integrity from H to N or link to analysis/supporting references? If you'd like, we can run this through a CVSS calculator: https://www.first.org/cvss/calculator/3.1 and will update if we agree.

[mistressxalexis]

__

[github-actions]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.