PT-2025-48971

Name of the Vulnerable Software and Affected Versions Next.js versions 14.3.0-canary.77 through 16.0.6 React versions 15.x and 16.x Description A critical Remote Code Execution RCE vulnerability exists in Next.js applications utilizing the App Router, specifically affecting React Server Component...

EUVD-2025-120905

Malicious code in upgrade-nextjs-phoebe-node-sass npm...

EUVD-2025-120906

Malicious code in upgrade-nextjs-lint-buffer npm...