VDB

WID-SEC-W-2025-2738

WID-SEC-W-2025-2738 PUBLISHED CVSS 9.300000190734863 CRITICAL

Next.js ist ein Framework für React-basierte Web-Anwendungen. React ist eine Open-Source-JavaScript-Bibliothek zur Erstellung von Benutzeroberflächen, insbesondere für Single-Page-Anwendungen.

Risk Scores

CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
Open Source React <19.0.1
Vercel Next.js <15.4.8
Open Source React 19.2.1
Vercel Next.js <15.0.5
Open Source React <19.2.1
Vercel Next.js <16.0.7
Vercel Next.js 15.0.5
Vercel Next.js 15.5.7
Vercel Next.js 15.4.8
Vercel Next.js 15.3.6
Open Source React 19.0.1
Vercel Next.js <15.3.6
Vercel Next.js <15.1.9
Vercel Next.js 15.2.6
Vercel Next.js <15.2.6
Vercel Next.js <15.5.7
Open Source React <19.1.2
Vercel Next.js 15.1.9
Open Source React 19.1.2
Vercel Next.js 16.0.7

Timeline

  • Jun 24, 2024 PoC Published
  • Dec 3, 2025 CVE Published
  • Dec 4, 2025 CVE Updated
  • Dec 5, 2025 PoC Published
  • Dec 5, 2025 PoC Published
  • Dec 6, 2025 PoC Published
  • Dec 7, 2025 PoC Published
  • Dec 9, 2025 PoC Published
  • Dec 9, 2025 PoC Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›