[GHSA-c59h-r6p8-q9wc] Next.js missing cache-control header may lead to CDN caching empty reply

[medikoo]

Updates

• Affected products

Comments
The problem is that security vulnerability is incorrectly applied to the v0.4 version of next when it was a totally different product, and that affects some packages that still depend on [email protected].

Unfortunately, this problem comes back whenever any new vulnerability is added for next.

See #179

Note: I was unable to setup a valid range in the form (either >=0.9.9 <13.4.20-canary.13 or 0.9.9 - 13.4.20-canary.12), how can we fix it?

[darakian]

Note: I was unable to setup a valid range in the form (either >=0.9.9 <13.4.20-canary.13 or 0.9.9 - 13.4.20-canary.12), how can we fix it?

You were probably missing a , between the lower and upper expressions 😄
Why would 0.9.9 be the correct lower bound though? You're right that 0.4 was completely different but that would make 0.4 the lower bound right?

[medikoo]

Closing, as I was able to address it by crafting PR manually here: #2902