{"action":"Upgrade next to 15.0.6 or later.","affected":[{"fixed":"15.0.6","introduced":"15.0.0-canary.0"},{"fixed":"15.1.10","introduced":"15.1.1-canary.0"},{"fixed":"15.2.7","introduced":"15.2.0-canary.0"},{"fixed":"15.3.7","introduced":"15.3.0-canary.0"},{"fixed":"15.4.9","introduced":"15.4.0-canary.0"},{"fixed":"15.5.8","introduced":"15.5.1-canary.0"},{"fixed":"15.6.0-canary.59","introduced":"15.6.0-canary.0"},{"fixed":"16.0.9","introduced":"16.0.0-beta.0"},{"fixed":"16.1.0-canary.17","introduced":"16.1.0-canary.0"}],"component":"next","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["15.0.6","15.1.10","15.2.7","15.3.7","15.4.9","15.5.8","15.6.0-canary.59","16.0.9","16.1.0-canary.17"],"ghsa_id":"GHSA-w37m-7fhw-fmv9","id":"tcs_01M5KGDNKHFC52BYB1GDWDXFN0","modified_at":"2026-09-10T03:50:32.139022825Z","published_at":"2025-12-11T22:49:56Z","references":["https://osv.dev/vulnerability/GHSA-w37m-7fhw-fmv9","https://github.com/vercel/next.js/security/advisories/GHSA-w37m-7fhw-fmv9","https://github.com/vercel/next.js","https://nextjs.org/blog/security-update-2025-12-11","https://www.cve.org/CVERecord?id=CVE-2025-55183"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-w37m-7fhw-fmv9","url":"https://osv.dev/vulnerability/GHSA-w37m-7fhw-fmv9"}],"summary":"Next Server Actions Source Code Exposure"}