| Package | Affected versions | Patched versions |
|---|---|---|
| next.js | = 12.3.5= 13.5.9= 14.2.25= 15.2.3 | |
| next | ≥ 12.3.5, < 12.3.6≥ 13.5.9, < 13.5.10≥ 14.2.25, < 14.2.26≥ 15.2.3, < 15.2.4 | 12.3.613.5.1014.2.2615.2.4 |
In the process of remediating CVE-2025-29927, we looked at other possible exploits of Middleware. We independently verified this low severity vulnerability in parallel with two reports from independent researchers.
Learn more here.
Thank you to Jinseo Kim kjsman and RyotaK (GMO Flatt Security Inc.) with takumi-san.ai for the responsible disclosure. These researchers were awarded as part of our bug bounty program.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free