Security Bulletin: IBM Edge Data Collector uses next-15.3.1.tgz which is vulnerable to CVE-2025-55173, CVE-2025-57752.

Summary IBM Edge Data Collector uses next-15.3.1.tgz which is vulnerable to CVE-2025-55173, CVE-2025-57752. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-55173 DESCRIPTION: Next.js is a React framework for building full-stack...

PT-2026-2503

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ocfs2 subsystem, specifically in the ocfs2 find victim chain function. A kernel BUG occurs when the cl next free rec field within the allocati...

Exploit for Race Condition in Vercel Next.Js

CVE-2025-32421---Race-Condition-Vulnerability---Next.js PoC La...

EUVD-2025-199062

Malicious code in next-styled-nprogress npm...

Malicious code in next-styled-nprogress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73288a3937c0b6e5fe20c011142795ae2f436252a77e2ab6b24dabcdb9ab7dd5 The package next-styled-nprogress was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190981 Malicious code in next-styled-nprogress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73288a3937c0b6e5fe20c011142795ae2f436252a77e2ab6b24dabcdb9ab7dd5 The package next-styled-nprogress was found to contain malicious code. Source: ghsa-malware...

Malicious code in next-simple-google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c0df29a06f4738e26d90f0418c197f39ad60e98981f43cff7baaa82a672ced The package next-simple-google-analytics was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190980 Malicious code in next-simple-google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c0df29a06f4738e26d90f0418c197f39ad60e98981f43cff7baaa82a672ced The package next-simple-google-analytics was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199064

Malicious code in next-circular-dependency npm...

Malicious code in next-circular-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea89df6bfd2c4f68a23ce84ab344f8d0581b90cfbf4c6e0a82570797b5cffc0 The package next-circular-dependency was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190979 Malicious code in next-circular-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea89df6bfd2c4f68a23ce84ab344f8d0581b90cfbf4c6e0a82570797b5cffc0 The package next-circular-dependency was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-198774

Malicious code in @seung-ju/next npm...

Malicious code in @seung-ju/next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5861551f803b13038f4794b2deef775059eadcd068c47515bb716ee211e111cc The package @seung-ju/next was found to contain malicious code. Source: ghsa-malware 99798d918b493ce5ca07d2bda2360901854e0e714663247cd7bc3d0bd60837ed...

CVE-2025-64762 authkit-nextjs may let session cookies be cached in CDNs

The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In authkit-nextjs version 2.11.0 and below, authenticated responses do not defensively apply anti-caching headers. In environments where CDN caching is enable...

CVE-2025-64762 authkit-nextjs may let session cookies be cached in CDNs

The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In authkit-nextjs version 2.11.0 and below, authenticated responses do not defensively apply anti-caching headers. In environments where CDN caching is enable...

CVE-2025-13425 Denial of Service in OSV-SCALIBR

A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic index out of range and an application crash denial of service in OSV-SCALIBR...

CVE-2025-13425 Denial of Service in OSV-SCALIBR

A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic index out of range and an application crash denial of service in OSV-SCALIBR...

TencentOS Server 4: openssl (TSSA-2024:0289)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0289 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...