Summaries of CVE-2025-59471 and CVE-2025-59472

T1Covered by 1 source · first reported by Vercel (blog + changelog) at 26 Jan, 13:00 UTC

Two medium-severity denial-of-service vulnerabilities were discovered in self-hosted Next.js applications. Both issues can cause server crashes through memory exhaustion under specific configurations. No data exposure or privilege escalation is possible. Applications hosted on Vercel’s platform are…

security

Sources

• T1Summaries of CVE-2025-59471 and CVE-2025-59472Vercel (blog + changelog)26 Jan, 13:00

Vulnerabilities

• CVE-2025-59471
• CVE-2025-59472