Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007429

sonatype-2025-007429

next - Deserialization of Untrusted Data [CVE-2025-66478]

Published Dec 4, 2025

https://github.com/vercel/next.js/security/advisories/GHSA-9qr9-h5gf-34mp https://nextjs.org/blog/CVE-2025-66478

CVSS ScoreCritical

9.3

Ecosystem	Package	Version


npm	next	14.3.0-canary.77
npm	next	14.3.0-canary.78
npm	next	14.3.0-canary.79
npm	next	14.3.0-canary.80
npm	next	14.3.0-canary.81
npm	next	14.3.0-canary.82
npm	next	14.3.0-canary.83
npm	next	14.3.0-canary.84
npm	next	14.3.0-canary.85
npm	next	14.3.0-canary.86
npm	next	14.3.0-canary.87
npm	next	15.0.0-canary.0
npm	next	15.0.0-canary.100
npm	next	15.0.0-canary.101
npm	next	15.0.0-canary.102
npm	next	15.0.0-canary.103
npm	next	15.0.0-canary.104
npm	next	15.0.0-canary.105
npm	next	15.0.0-canary.106
npm	next	15.0.0-canary.107
npm	next	15.0.0-canary.108
npm	next	15.0.0-canary.109
npm	next	15.0.0-canary.10
npm	next	15.0.0-canary.110
npm	next	15.0.0-canary.111
npm	next	15.0.0-canary.112
npm	next	15.0.0-canary.113
npm	next	15.0.0-canary.114
npm	next	15.0.0-canary.115
npm	next	15.0.0-canary.116
npm	next	15.0.0-canary.117
npm	next	15.0.0-canary.118
npm	next	15.0.0-canary.119
npm	next	15.0.0-canary.11
npm	next	15.0.0-canary.120
npm	next	15.0.0-canary.121
npm	next	15.0.0-canary.122
npm	next	15.0.0-canary.123
npm	next	15.0.0-canary.124
npm	next	15.0.0-canary.125
npm	next	15.0.0-canary.126
npm	next	15.0.0-canary.127
npm	next	15.0.0-canary.128
npm	next	15.0.0-canary.129
npm	next	15.0.0-canary.12
npm	next	15.0.0-canary.130
npm	next	15.0.0-canary.131
npm	next	15.0.0-canary.132
npm	next	15.0.0-canary.133
npm	next	15.0.0-canary.134

sonatype-2025-007429 | Components Impacted | Sonatype Guide | Sonatype Guide