CVE-2024-37162

CVE-2024-37162 affects the zsa library for Next.js, where a flaw in production builds exposes server-side parse error stacks to clients, potentially revealing sensitive information like usernames and directory paths. Rated Medium (CVSS 5.3), this vulnerability requires no authentication or user interaction, allowing remote attackers to gain unauthorized access to server environment details. While no active exploitation, public exploits, or significant community discussion have been observed, the risk remains due to the potential for information disclosure.