tocsin

npm/next: critical 10

Next.js is vulnerable to RCE in React flight protocol

Action: Upgrade next to 15.0.5 or later.

npm i next@15.0.5
npm i next@15.1.9
npm i next@15.2.6
npm i next@15.3.6
npm i next@15.4.8
npm i next@15.5.7
npm i next@16.0.7

Affected

introducedfixedlast affected
14.3.0-canary.7715.0.5-
15.1.0-canary.015.1.9-
15.2.0-canary.015.2.6-
15.3.0-canary.015.3.6-
15.4.0-canary.015.4.8-
15.5.0-canary.015.5.7-
16.0.0-canary.016.0.7-

Fixed versions

15.0.515.1.915.2.615.3.615.4.815.5.716.0.7

Sources

published · modified · JSON