packages/next/src/server/app-render/action-handler.ts
Last patched
handleAction in vercel/next.js was changed by 2 published CVE fixes in 2026, in 3 distinct patches that added or removed 95 lines in total.
vercel/next.js has 39 CVEs with a located fix in total, so 5% of them touched this function.
Every published CVE whose fix changed handleAction, newest first, with the lines each fix touched.
CVE-2026-64646 · lines 783–989 · +57 −13 in 6 hunks
CVE-2026-27978 · lines 619–660 · +16 −9 in 3 hunks
Get an alert when the next CVE fix lands in vercel/next.js, with the patched functions.
Monitor next.js CVEsFunctions in the same file that CVE fixes also changed.
Functions in vercel/next.js changed by the most CVE fixes.
Common questions about CVE fixes to handleAction.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
