14 matches found
CVE-2025-59472 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse, jitsucom-jitsu...
CVE-2025-59472
A denial of service vulnerability exists in Next.js versions with Partial Prerendering PPR enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the Next-Resume: 1 header and processes attacker-controlled postponed state data. Two closely related...
@risc0/ui (>=0.0.314, <=0.0.315) potentially affected by CVE-2025-59472 via next (15.2.2-canary.0)
next NPM version 15.2.2-canary.0 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @risc0/ui =0.0.314, =0.0.315 Source cves: CVE-2025-59472 Source advisory: GHSA-5F7Q-JPQC-WP7H...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +297 more potentially affected by CVE-2025-59472 via next (>=16.0.0-beta.0, <=16.1.4)
next NPM version =16.0.0-beta.0, =0.1.0, =100.0.0, =1.0.0, =0.3.128, =1.0.0-canary.3, =0.1.0, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2025-59472 Source advisory: OSV:GHSA-5F7Q-JPQC-WP7H...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +297 more potentially affected by CVE-2025-59472 via next (>=16.0.0-beta.0, <=16.1.4)
next NPM version =16.0.0-beta.0, =0.1.0, =100.0.0, =1.0.0, =0.3.128, =1.0.0-canary.3, =0.1.0, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2025-59472 Source advisory: GHSA-5F7Q-JPQC-WP7H...
@optodev/ui (>=1.1.0, <=1.1.1), intersightai-db-frontend (0.1.0) potentially affected by CVE-2025-59472 via next (>=15.2.0-canary.64, <=15.2.0-canary.75)
next NPM version =15.2.0-canary.64, =1.1.0, =1.1.1 - intersightai-db-frontend 0.1.0 Source cves: CVE-2025-59472 Source advisory: GHSA-5F7Q-JPQC-WP7H...
Linux Distros Unpatched Vulnerability : CVE-2025-59472
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability exists in Next.js versions with Partial Prerendering PPR enabled when running in minimal mode. The PPR resume endpoint accepts...
9remote (>=0.1.0, <=0.1.8), @acvtech5b9/vms-multi-language-locals (>=100.0.0, <=111.0.0) +108 more potentially affected by CVE-2025-59471 +1 more via next (>=16.1.1, <=16.1.4)
next NPM version =16.1.1, =0.1.0, =100.0.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.0.1, =1.0.8, =0.3.0, =0.4.0 and more Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory: SNYK:JS-NEXT-15104645...
9remote (>=0.1.0, <=0.1.8), @acvtech5b9/vms-multi-language-locals (>=100.0.0, <=111.0.0) +108 more potentially affected by CVE-2025-59471 +1 more via next (>=16.1.1, <=16.1.4)
next NPM version =16.1.1, =0.1.0, =100.0.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.0.1, =1.0.8, =0.3.0, =0.4.0 and more Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory: SNYK:JS-NEXT-15105315...
-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0to1-builders (0.1.0) +2440 more potentially affected by CVE-2025-59471 +1 more via next (>=15.0.0-canary.2, <=15.6.0-canary.41)
next NPM version =15.0.0-canary.2, =0.1.0, =0.1.0, =0.1.0, =1.0.10, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory: SNYK:JS-NEXT-15105315...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +297 more potentially affected by CVE-2025-59471 +1 more via next (>=16.0.0-beta.0, <=16.1.4)
next NPM version =16.0.0-beta.0, =0.1.0, =100.0.0, =1.0.0, =0.3.128, =1.0.0-canary.3, =0.1.0, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory: MEND:CVE-2025-59472...
@vitnode/blog (>=1.2.0-canary.56, <=1.2.0-canary.59) potentially affected by CVE-2025-59471 +1 more via next (15.6.0-canary.41)
next NPM version 15.6.0-canary.41 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @vitnode/blog =1.2.0-canary.56, =1.2.0-canary.59 Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory: MEND:CVE-2025-59472...
CVE-2025-59472
creationtimestamp| type| source ---|---|--- 2026-01-26 20:14:07+00:00| seen| https://bsky.app/profile/feedbot.unronritaro.net/post/3mde2n3qxx32h 2026-01-27 01:09:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdel63fggd2h 2026-01-28 04:33:24+00:00| seen|...
