CVE-2025-59472 vulnerabilities

Vulnerabilities for packages: langfuse-fips, jitsucom-jitsu, langfuse...

CVE-2025-59472

A denial of service vulnerability exists in Next.js versions with Partial Prerendering PPR enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the Next-Resume: 1 header and processes attacker-controlled postponed state data. Two closely related...

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +300 more potentially affected by CVE-2025-59472 via next (>=16.0.0, <=16.1.4)

next NPM version =16.0.0, =0.1.0, =1.0.0, =0.3.128, =1.0.0-canary.3, =0.1.0, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.1.0, =1.0.4186, =1.0.4144, =1.0.4319 and more Source cves: CVE-2025-59472 Source advisory: OSV:GHSA-5F7Q-JPQC-WP7H...

@071yoon/log-console-core (0.1.0), @3bitmt/3bit-sidebar-dashboard (1.2.0) +211 more potentially affected by CVE-2025-59471 +1 more via next (>=16.0.0, <=16.1.0)

next NPM version =16.0.0, =1.0.0, =0.3.128, =1.0.0-canary.3, =0.1.0, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =1.0.4186, =1.0.4144, =1.0.4257, =1.0.4257, =1.0.4556 and more Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory:...

9remote (>=0.1.0, <=0.1.8), @alecpapierniak/mcp-manager (>=0.1.0, <=0.1.2) +105 more potentially affected by CVE-2025-59471 +1 more via next (>=16.1.1, <=16.1.4)

next NPM version =16.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.0.1, =1.0.8, =0.3.0, =0.0.0-canary-20260113162409, =1.53.0 and more Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory: SNYK:JS-NEXT-15104645...

@071yoon/log-console-core (0.1.0), @3bitmt/3bit-sidebar-dashboard (1.2.0) +211 more potentially affected by CVE-2025-59471 +1 more via next (>=16.0.0, <=16.1.0)

next NPM version =16.0.0, =1.0.0, =0.3.128, =1.0.0-canary.3, =0.1.0, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =1.0.4186, =1.0.4144, =1.0.4257, =1.0.4257, =1.0.4556 and more Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory:...

9remote (>=0.1.0, <=0.1.8), @alecpapierniak/mcp-manager (>=0.1.0, <=0.1.2) +105 more potentially affected by CVE-2025-59471 +1 more via next (>=16.1.1, <=16.1.4)

next NPM version =16.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.0.1, =1.0.8, =0.3.0, =0.0.0-canary-20260113162409, =1.53.0 and more Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory: SNYK:JS-NEXT-15105315...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0to1-builders (0.1.0) +2423 more potentially affected by CVE-2025-59471 +1 more via next (>=15.0.0, <=15.5.27)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.0, =1.0.10, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory: SNYK:JS-NEXT-15105315...