CVE-2025-55182-Scanner

CVE‑2025‑55182 – Scanner RCE per Deserializzazione RSC di Next.js Questo strumento verifica se un target è vulnerabile a CVE‑2025‑55182 , un bug di Remote Code Execution causato dalla gestione non sicura dei payload dei modelli RSC React Server Components all'interno di Next.js. La vulnerabilità...

Next.js has a Cache poisoning vulnerability due to omission of the Vary header

Summary A cache poisoning issue in Next.js App Router =15.3.0 and 15.3.3 may have allowed RSC payloads to be cached and served in place of HTML, under specific conditions involving middleware and redirects. This issue has been fixed in Next.js 15.3.3. Users on affected versions should upgrade...