CVE-2025-59472 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse, jitsucom-jitsu...

CVE-2025-59472

A denial of service vulnerability exists in Next.js versions with Partial Prerendering PPR enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the Next-Resume: 1 header and processes attacker-controlled postponed state data. Two closely related...

9remote (>=0.1.0, <=0.1.8), @acvtech5b9/vms-multi-language-locals (100.0.0) +109 more potentially affected by CVE-2025-59471 +1 more via next (>=16.1.1, <=16.1.4)

next NPM version =16.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.0.1, =1.0.8, =0.3.0, =0.4.0 and more Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory: SNYK:JS-NEXT-15104645...

9remote (>=0.1.0, <=0.1.8), @acvtech5b9/vms-multi-language-locals (100.0.0) +109 more potentially affected by CVE-2025-59471 +1 more via next (>=16.1.1, <=16.1.4)

next NPM version =16.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.0.1, =1.0.8, =0.3.0, =0.4.0 and more Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory: SNYK:JS-NEXT-15105315...