vulnerability
FreeBSD: VID-7a1bd1ca-cf40-41e2-9c5f-143a0d4b17af (CVE-2025-55183): github-release-monitor -- multiple vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:P/I:N/A:N) | Dec 13, 2025 | Jan 27, 2026 | Jan 27, 2026 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Dec 13, 2025
Added
Jan 27, 2026
Modified
Jan 27, 2026
Description
https://nextjs.org/blog/security-update-2025-12-11 reports: Description (Medium) Source Code Exposure: CVE-2025-55183 A specifically crafted HTTP request can cause a Server Function to return the compiled source code of other Server Functions in your application. This could reveal business logic. Secrets could also be exposed if they are defined directly in your code (rather than accessed via environment variables at runtime) and referenced within a Server Function. Depending on your bundler configuration, these values may be inlined into the compiled function output. (High) Denial of Service: CVE-2025-55184 A specifically crafted HTTP request can be sent to any App Router endpoint that, when deserialized, can cause an infinite loop that hangs the server process and prevents future HTTP requests from being served.
Solution
freebsd-upgrade-package-github-release-monitor
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.