Taking down Next.js servers for 0.0001 cents a popð¤ Alex Browne    ðï¸ 26 Nov 2025    â³5 min read TL;DRWe discovered an unauthenticated DoS vulnerability that crashes a self-hosted Next.js server with a single HTTP request and negligible resources. The attack can be prevented by a reverse proxy that limits request size; rate-limiting alone is not sufficient protection. The vulnerability was initi


{{#tags}}- {{label}}
{{/tags}}