Linux Distros Unpatched Vulnerability : CVE-2025-49005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In Next.js App Router from 15.3.0 to before 15.3.3 and Vercel CLI from 41.4.1 to 42.2.0, ...

CVE-2025-49005 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu...

CVE-2025-49005 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu...

CVE-2025-49005

A cache poisoning flaw has been discovered in Next.js. This flaw can allow page requests for HTML content to return a React Server Component RSC payload instead under certain conditions. Mitigation Mitigation for this issue is either not available or the currently available options do not meet th...

CVE-2025-49005

creationtimestamp| type| source ---|---|--- 2025-07-03 23:12:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt3u3a3mqo2a 2025-07-04 09:00:05+00:00| seen| https://bsky.app/profile/rss.y-u-e.workers.dev/post/3lt4uw734il2l 2025-07-04 17:14:04+00:00| seen|...

CVE-2025-49005

Next.js CVE-2025-49005 affects Next.js App Router (versions 15.3.0 to before 15.3.3) and Vercel CLI (41.4.1 to 42.2.0). A cache poisoning vulnerability could cause HTML requests to return a React Server Component payload under certain conditions. When deployed on Vercel, impact is limited to the ...

0xmugitea (0.1.0), 300tea300 (0.1.2) +171 more potentially affected by CVE-2025-49005 via next (>=15.3.0, <=15.3.2)

next NPM version =15.3.0, =0.1.0, =0.0.5-alpha-20250409222818-a35bb677fde1e4e9cf3db443e9ae36abf4f8e21b, =0.0.20, =0.9.14, =0.0.73, =0.0.73, =0.0.73, =0.0.151, =0.1.0, =0.0.14, =0.0.22 and more Source cves: CVE-2025-49005 Source advisory: OSV:GHSA-R2FC-CCR8-96C4...