{"action":"Upgrade next to 14.2.31 or later.","affected":[{"fixed":"14.2.31","introduced":"0.9.9"},{"fixed":"15.4.5","introduced":"15.0.0"}],"component":"next","cve_ids":["CVE-2025-55173"],"ecosystem":"npm","epss":0.006,"exploited":false,"fixed_versions":["14.2.31","15.4.5"],"ghsa_id":"GHSA-xv57-4mr9-wg8v","id":"tcs_01M5KGJWNF7WEA686XTP9JTR32","modified_at":"2026-09-10T03:50:27.715566208Z","published_at":"2025-08-29T21:59:55Z","references":["https://osv.dev/vulnerability/GHSA-xv57-4mr9-wg8v","https://github.com/vercel/next.js/security/advisories/GHSA-xv57-4mr9-wg8v","https://nvd.nist.gov/vuln/detail/CVE-2025-55173","https://github.com/vercel/next.js/commit/6b12c60c61ee80cb0443ccd20de82ca9b4422ddd","https://github.com/vercel/next.js","https://vercel.com/changelog/cve-2025-55173","http://vercel.com/changelog/cve-2025-55173"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-xv57-4mr9-wg8v","url":"https://osv.dev/vulnerability/GHSA-xv57-4mr9-wg8v"}],"summary":"Next.js Content Injection Vulnerability for Image Optimization"}