{"action":"Upgrade next to 14.2.31 or later.","affected":[{"fixed":"14.2.31","introduced":"0.9.9"},{"fixed":"15.4.5","introduced":"15.0.0"}],"component":"next","cve_ids":["CVE-2025-57752"],"ecosystem":"npm","epss":0.00347,"exploited":false,"fixed_versions":["14.2.31","15.4.5"],"ghsa_id":"GHSA-g5qg-72qw-gw5v","id":"tcs_01M5KFQ859TG04335YC3GNRBPF","modified_at":"2026-09-10T03:50:26.953168554Z","published_at":"2025-08-29T22:06:22Z","references":["https://osv.dev/vulnerability/GHSA-g5qg-72qw-gw5v","https://github.com/vercel/next.js/security/advisories/GHSA-g5qg-72qw-gw5v","https://nvd.nist.gov/vuln/detail/CVE-2025-57752","https://github.com/vercel/next.js/pull/82114","https://github.com/vercel/next.js/commit/6b12c60c61ee80cb0443ccd20de82ca9b4422ddd","https://github.com/vercel/next.js","https://vercel.com/changelog/cve-2025-57752"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"GHSA-g5qg-72qw-gw5v","url":"https://osv.dev/vulnerability/GHSA-g5qg-72qw-gw5v"}],"summary":"Next.js Affected by Cache Key Confusion for Image Optimization API Routes"}