Next.js React Flight Protocol Remote Code Execution Vulnerability (GHSA-9g9r-h5gf-34mp)
Security Advisory
GHSA-9qr9-h5gf-34mp
Critical
Vercel
Affected:
- next >= 14.3.0-canary.77, < 15.0.5
- next >= 15.2.0-canary.0, < 15.2.6
- next >= 15.3.0-canary.0, < 15.3.6
- next >= 15.4.0-canary.0, < 15.4.8
- next >= 16.0.0-canary.0, < 16.0.7
Fixed in:
- 15.0.5
- 15.2.6
- 15.3.6
- 15.4.8
- 16.0.7
Referenced CVEs:
CVE-2025-71389 · 10.0
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.