npm/next: medium 5.3
Next Server Actions Source Code Exposure
Action: Upgrade next to 15.0.6 or later.
npm i next@15.0.6npm i next@15.1.10npm i next@15.2.7npm i next@15.3.7npm i next@15.4.9npm i next@15.5.8npm i next@15.6.0-canary.59npm i next@16.0.9npm i next@16.1.0-canary.17Affected
| introduced | fixed | last affected |
|---|---|---|
| 15.0.0-canary.0 | 15.0.6 | - |
| 15.1.1-canary.0 | 15.1.10 | - |
| 15.2.0-canary.0 | 15.2.7 | - |
| 15.3.0-canary.0 | 15.3.7 | - |
| 15.4.0-canary.0 | 15.4.9 | - |
| 15.5.1-canary.0 | 15.5.8 | - |
| 15.6.0-canary.0 | 15.6.0-canary.59 | - |
| 16.0.0-beta.0 | 16.0.9 | - |
| 16.1.0-canary.0 | 16.1.0-canary.17 | - |
Fixed versions
| 15.0.6 | 15.1.10 | 15.2.7 | 15.3.7 | 15.4.9 | 15.5.8 | 15.6.0-canary.59 | 16.0.9 | 16.1.0-canary.17 |
Sources
- osv: GHSA-w37m-7fhw-fmv9
- https://github.com/vercel/next.js/security/advisories/GHSA-w37m-7fhw-fmv9
- https://github.com/vercel/next.js
- https://nextjs.org/blog/security-update-2025-12-11
- https://www.cve.org/CVERecord?id=CVE-2025-55183
published · modified · JSON