ROOT-APP-NPM-CVE-2025-55173 CVE-2025-55173 in next - Patched by Root

🗓️ 17 Aug 2026 15:27:30Reported by GoogleType

osv🔗 osv.dev👁 11 Views

Root patched the security vulnerability in the rootio nextjs package; multiple fixed versions available.

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses next-15.3.1.tgz which is vulnerable to CVE-2025-55173, CVE-2025-57752.	1 Dec 202517:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Event Processing	5 Jan 202611:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in QRadar Suite Software	13 Mar 202619:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Next.js (CVE-2025-57752 and CVE-2025-55173)	30 May 202608:51	–	ibm
IBM Security Bulletins	Security Bulletin: Components with known vulnerabilities in IBM QRadar Pre-Validation App for IBM QRadar SIEM	2 Mar 202618:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data	16 Dec 202511:07	–	ibm
IBM Security Bulletins	Security Bulletin: Components with known vulnerabilities in IBM Security QRadar Analyst Workflow for IBM QRadar SIEM	19 Dec 202521:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Network Threat Analytics app for IBM QRadar SIEM includes components with known vulnerabilities	19 Dec 202521:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Watsonx BI Assistant for CP4D	15 Dec 202515:39	–	ibm
Chainguard	CVE-2025-55173 vulnerabilities	2 Sep 202519:17	–	cgr

17 Aug 2026 17:30Current

4.9Medium risk

Vulners AI Score4.9

CVSS 3.14.3

EPSS0.00546

SSVC