VDB
CVE-2025-32421
CVE-2025-32421
PUBLISHED
Next.js ist ein Framework für React-basierte Web-Anwendungen.
EPSS 0.75% · 73.6th percentile
Risk Scores
EPSS Score
0.75%
73.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vercel | Vercel Next.js <14.2.24 | |
| Vercel | Vercel Next.js <15.1.6 |
Timeline
- Jan 21, 1970 Security Advisory
- May 14, 2025 CVE Published
- May 15, 2025 EPSS Score
- May 15, 2025 Coalition ESS Score
- May 16, 2025 Coalition ESS Score
- May 26, 2025 EPSS Score
- Jun 7, 2025 EPSS Score
- Jun 18, 2025 EPSS Score
- Jun 30, 2025 EPSS Score
- Jul 11, 2025 EPSS Score
- Jul 22, 2025 EPSS Score
- Aug 3, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1061.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1061 advisory
- https://github.com/vercel/next.js/security/advisories/GHSA-qpjv-v59x-3qc4 advisory
- https://euvd.enisa.europa.eu/enisa/EUVD-2025-14946 advisory
- https://github.com/Delfaster/CVE-2025-32421---Race-Condition-Vulnerability---Next.js advisory