CVE-2025-57822

T1Covered by 1 source · first reported by Vercel (blog + changelog) at 29 Aug 2025, 13:00 UTC

Summary Impact Resolution Workarounds Credit References Next.js Middleware v14.2.32 v15.4.7 Server-Side Request Forgery (SSRF) NextResponse.next() request A vulnerability affectinghas been addressed. It impacted versions prior toand, and involved arisk introduced by misconfigured usage of…