CVE-2025-59472

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-59472
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-59472.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-59472
Aliases
Downstream
CGA (6)
CLSA (25)
Published
2026-01-26T21:43:05Z
Modified
2026-10-21T02:30:38Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A denial of service vulnerability exists in Next.js versions with Partial Prerendering (PPR) enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the Next-Resume: 1 header and processes attacker-controlled postponed state data. Two closely related vulnerabilities allow an attacker to crash the server process through memory exhaustion:

  1. Unbounded request body buffering: The server buffers the entire POST request body into memory using Buffer.concat() without enforcing any size limit, allowing arbitrarily large payloads to exhaust available memory.

  2. Unbounded decompression (zipbomb): The resume data cache is decompressed using inflateSync() without limiting the decompressed output size. A small compressed payload can expand to hundreds of megabytes or gigabytes, causing memory exhaustion.

Both attack vectors result in a fatal V8 out-of-memory error (FATAL ERROR: Reached heap limit Allocation failed - JavaScript heap out of memory) causing the Node.js process to terminate. The zipbomb variant is particularly dangerous as it can bypass reverse proxy request size limits while still causing large memory allocation on the server.

To be affected you must have an application running with experimental.ppr: true or cacheComponents: true configured along with the NEXT_PRIVATE_MINIMAL_MODE=1 environment variable.

Strongly consider upgrading to 15.6.0-canary.61 or 16.1.5 to reduce risk and prevent availability issues in Next applications.

Database specific 
{
    "cna_assigner":  "hackerone",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59472.json"
}
References

Affected packages

Git / github.com/vercel/next.js

Affected ranges

Type
GIT
Repo
https://github.com/vercel/next.js
Events
Introduced
51bfe3c1863b191f4b039bc230e8ed5c57b0baf3
Fixed
c654bec6eb08382ed2ef47c90317039b6693f62a
Introduced
950609f96f694c5475d18cd2d72a0052ca04d4b9
Fixed
acba4a6b9f48e0a067c592dac322410c0e122018
Introduced
c654bec6eb08382ed2ef47c90317039b6693f62a
Last Affected
33759e0be7d31f8a5d59544267f7ec9b914f37e5
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:*:*:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.0.0"
                },
                {
                    "fixed":  "15.6.0"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:*:*:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "16.0.0"
                },
                {
                    "fixed":  "16.1.5"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:-:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-NA"
                },
                {
                    "last_affected":  "15.6.0-NA"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary0:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary0"
                },
                {
                    "last_affected":  "15.6.0-canary0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary1:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary1"
                },
                {
                    "last_affected":  "15.6.0-canary1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary10:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary10"
                },
                {
                    "last_affected":  "15.6.0-canary10"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary11:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary11"
                },
                {
                    "last_affected":  "15.6.0-canary11"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary12:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary12"
                },
                {
                    "last_affected":  "15.6.0-canary12"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary13:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary13"
                },
                {
                    "last_affected":  "15.6.0-canary13"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary14:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary14"
                },
                {
                    "last_affected":  "15.6.0-canary14"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary15:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary15"
                },
                {
                    "last_affected":  "15.6.0-canary15"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary16:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary16"
                },
                {
                    "last_affected":  "15.6.0-canary16"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary17:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary17"
                },
                {
                    "last_affected":  "15.6.0-canary17"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary18:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary18"
                },
                {
                    "last_affected":  "15.6.0-canary18"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary19:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary19"
                },
                {
                    "last_affected":  "15.6.0-canary19"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary2:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary2"
                },
                {
                    "last_affected":  "15.6.0-canary2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary20:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary20"
                },
                {
                    "last_affected":  "15.6.0-canary20"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary21:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary21"
                },
                {
                    "last_affected":  "15.6.0-canary21"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary22:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary22"
                },
                {
                    "last_affected":  "15.6.0-canary22"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary23:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary23"
                },
                {
                    "last_affected":  "15.6.0-canary23"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary24:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary24"
                },
                {
                    "last_affected":  "15.6.0-canary24"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary25:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary25"
                },
                {
                    "last_affected":  "15.6.0-canary25"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary26:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary26"
                },
                {
                    "last_affected":  "15.6.0-canary26"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary27:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary27"
                },
                {
                    "last_affected":  "15.6.0-canary27"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary28:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary28"
                },
                {
                    "last_affected":  "15.6.0-canary28"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary29:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary29"
                },
                {
                    "last_affected":  "15.6.0-canary29"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary3:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary3"
                },
                {
                    "last_affected":  "15.6.0-canary3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary30:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary30"
                },
                {
                    "last_affected":  "15.6.0-canary30"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary31:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary31"
                },
                {
                    "last_affected":  "15.6.0-canary31"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary32:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary32"
                },
                {
                    "last_affected":  "15.6.0-canary32"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary33:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary33"
                },
                {
                    "last_affected":  "15.6.0-canary33"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary34:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary34"
                },
                {
                    "last_affected":  "15.6.0-canary34"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary35:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary35"
                },
                {
                    "last_affected":  "15.6.0-canary35"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary36:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary36"
                },
                {
                    "last_affected":  "15.6.0-canary36"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary37:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary37"
                },
                {
                    "last_affected":  "15.6.0-canary37"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary38:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary38"
                },
                {
                    "last_affected":  "15.6.0-canary38"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary39:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary39"
                },
                {
                    "last_affected":  "15.6.0-canary39"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary4:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary4"
                },
                {
                    "last_affected":  "15.6.0-canary4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary40:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary40"
                },
                {
                    "last_affected":  "15.6.0-canary40"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary41:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary41"
                },
                {
                    "last_affected":  "15.6.0-canary41"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary42:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary42"
                },
                {
                    "last_affected":  "15.6.0-canary42"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary43:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary43"
                },
                {
                    "last_affected":  "15.6.0-canary43"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary44:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary44"
                },
                {
                    "last_affected":  "15.6.0-canary44"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary45:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary45"
                },
                {
                    "last_affected":  "15.6.0-canary45"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary46:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary46"
                },
                {
                    "last_affected":  "15.6.0-canary46"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary47:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary47"
                },
                {
                    "last_affected":  "15.6.0-canary47"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary48:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary48"
                },
                {
                    "last_affected":  "15.6.0-canary48"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary49:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary49"
                },
                {
                    "last_affected":  "15.6.0-canary49"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary5:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary5"
                },
                {
                    "last_affected":  "15.6.0-canary5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary50:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary50"
                },
                {
                    "last_affected":  "15.6.0-canary50"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary51:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary51"
                },
                {
                    "last_affected":  "15.6.0-canary51"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary52:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary52"
                },
                {
                    "last_affected":  "15.6.0-canary52"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary53:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary53"
                },
                {
                    "last_affected":  "15.6.0-canary53"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary54:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary54"
                },
                {
                    "last_affected":  "15.6.0-canary54"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary55:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary55"
                },
                {
                    "last_affected":  "15.6.0-canary55"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary56:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary56"
                },
                {
                    "last_affected":  "15.6.0-canary56"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary57:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary57"
                },
                {
                    "last_affected":  "15.6.0-canary57"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary58:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary58"
                },
                {
                    "last_affected":  "15.6.0-canary58"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary59:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary59"
                },
                {
                    "last_affected":  "15.6.0-canary59"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary6:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary6"
                },
                {
                    "last_affected":  "15.6.0-canary6"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary60:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary60"
                },
                {
                    "last_affected":  "15.6.0-canary60"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary7:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary7"
                },
                {
                    "last_affected":  "15.6.0-canary7"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary8:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary8"
                },
                {
                    "last_affected":  "15.6.0-canary8"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:vercel:next.js:15.6.0:canary9:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "15.6.0-canary9"
                },
                {
                    "last_affected":  "15.6.0-canary9"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

15.*
15.6.0-NA
15.6.0-canary1
15.6.0-canary10
15.6.0-canary11
15.6.0-canary12
15.6.0-canary13
15.6.0-canary14
15.6.0-canary15
15.6.0-canary16
15.6.0-canary17
15.6.0-canary18
15.6.0-canary19
15.6.0-canary2
15.6.0-canary20
15.6.0-canary21
15.6.0-canary22
15.6.0-canary23
15.6.0-canary24
15.6.0-canary25
15.6.0-canary26
15.6.0-canary27
15.6.0-canary28
15.6.0-canary29
15.6.0-canary3
15.6.0-canary30
15.6.0-canary31
15.6.0-canary32
15.6.0-canary33
15.6.0-canary34
15.6.0-canary35
15.6.0-canary36
15.6.0-canary37
15.6.0-canary38
15.6.0-canary39
15.6.0-canary4
15.6.0-canary40
15.6.0-canary41
15.6.0-canary42
15.6.0-canary43
15.6.0-canary44
15.6.0-canary45
15.6.0-canary46
15.6.0-canary47
15.6.0-canary48
15.6.0-canary49
15.6.0-canary5
15.6.0-canary50
15.6.0-canary51
15.6.0-canary52
15.6.0-canary53
15.6.0-canary54
15.6.0-canary55
15.6.0-canary56
15.6.0-canary57
15.6.0-canary58
15.6.0-canary59
15.6.0-canary6
15.6.0-canary60
15.6.0-canary7
15.6.0-canary8
15.6.0-canary9
v15.*
v15.0.0
v15.0.1
v15.0.1-canary.0
v15.0.1-canary.1
v15.0.1-canary.2
v15.0.1-canary.3
v15.0.2
v15.0.2-canary.0
v15.0.2-canary.1
v15.0.2-canary.10
v15.0.2-canary.11
v15.0.2-canary.2
v15.0.2-canary.3
v15.0.2-canary.4
v15.0.2-canary.5
v15.0.2-canary.6
v15.0.2-canary.7
v15.0.2-canary.8
v15.0.2-canary.9
v15.0.3
v15.0.3-canary.0
v15.0.3-canary.1
v15.0.3-canary.2
v15.0.3-canary.3
v15.0.3-canary.4
v15.0.3-canary.5
v15.0.3-canary.6
v15.0.3-canary.7
v15.0.3-canary.8
v15.0.3-canary.9
v15.0.4-canary.0
v15.0.4-canary.1
v15.0.4-canary.10
v15.0.4-canary.11
v15.0.4-canary.12
v15.0.4-canary.13
v15.0.4-canary.14
v15.0.4-canary.15
v15.0.4-canary.16
v15.0.4-canary.17
v15.0.4-canary.18
v15.0.4-canary.19
v15.0.4-canary.2
v15.0.4-canary.20
v15.0.4-canary.21
v15.0.4-canary.22
v15.0.4-canary.23
v15.0.4-canary.24
v15.0.4-canary.25
v15.0.4-canary.26
v15.0.4-canary.27
v15.0.4-canary.28
v15.0.4-canary.29
v15.0.4-canary.3
v15.0.4-canary.30
v15.0.4-canary.31
v15.0.4-canary.32
v15.0.4-canary.33
v15.0.4-canary.34
v15.0.4-canary.35
v15.0.4-canary.36
v15.0.4-canary.37
v15.0.4-canary.38
v15.0.4-canary.39
v15.0.4-canary.4
v15.0.4-canary.40
v15.0.4-canary.41
v15.0.4-canary.42
v15.0.4-canary.43
v15.0.4-canary.44
v15.0.4-canary.45
v15.0.4-canary.46
v15.0.4-canary.47
v15.0.4-canary.48
v15.0.4-canary.49
v15.0.4-canary.5
v15.0.4-canary.50
v15.0.4-canary.51
v15.0.4-canary.52
v15.0.4-canary.6
v15.0.4-canary.7
v15.0.4-canary.8
v15.0.4-canary.9
v15.1.0
v15.1.1-canary.0
v15.1.1-canary.1
v15.1.1-canary.10
v15.1.1-canary.11
v15.1.1-canary.12
v15.1.1-canary.13
v15.1.1-canary.14
v15.1.1-canary.15
v15.1.1-canary.16
v15.1.1-canary.17
v15.1.1-canary.18
v15.1.1-canary.19
v15.1.1-canary.2
v15.1.1-canary.20
v15.1.1-canary.21
v15.1.1-canary.22
v15.1.1-canary.23
v15.1.1-canary.24
v15.1.1-canary.25
v15.1.1-canary.26
v15.1.1-canary.27
v15.1.1-canary.3
v15.1.1-canary.4
v15.1.1-canary.5
v15.1.1-canary.6
v15.1.1-canary.7
v15.1.1-canary.8
v15.1.1-canary.9
v15.2.0
v15.2.0-canary.0
v15.2.0-canary.1
v15.2.0-canary.10
v15.2.0-canary.11
v15.2.0-canary.12
v15.2.0-canary.13
v15.2.0-canary.14
v15.2.0-canary.15
v15.2.0-canary.16
v15.2.0-canary.17
v15.2.0-canary.18
v15.2.0-canary.19
v15.2.0-canary.2
v15.2.0-canary.20
v15.2.0-canary.21
v15.2.0-canary.22
v15.2.0-canary.23
v15.2.0-canary.24
v15.2.0-canary.25
v15.2.0-canary.26
v15.2.0-canary.27
v15.2.0-canary.28
v15.2.0-canary.29
v15.2.0-canary.3
v15.2.0-canary.30
v15.2.0-canary.31
v15.2.0-canary.32
v15.2.0-canary.33
v15.2.0-canary.34
v15.2.0-canary.35
v15.2.0-canary.36
v15.2.0-canary.38
v15.2.0-canary.39
v15.2.0-canary.4
v15.2.0-canary.40
v15.2.0-canary.41
v15.2.0-canary.42
v15.2.0-canary.43
v15.2.0-canary.44
v15.2.0-canary.45
v15.2.0-canary.46
v15.2.0-canary.47
v15.2.0-canary.48
v15.2.0-canary.49
v15.2.0-canary.5
v15.2.0-canary.50
v15.2.0-canary.51
v15.2.0-canary.52
v15.2.0-canary.53
v15.2.0-canary.54
v15.2.0-canary.55
v15.2.0-canary.56
v15.2.0-canary.57
v15.2.0-canary.58
v15.2.0-canary.59
v15.2.0-canary.6
v15.2.0-canary.60
v15.2.0-canary.61
v15.2.0-canary.62
v15.2.0-canary.63
v15.2.0-canary.64
v15.2.0-canary.65
v15.2.0-canary.66
v15.2.0-canary.67
v15.2.0-canary.68
v15.2.0-canary.69
v15.2.0-canary.7
v15.2.0-canary.70
v15.2.0-canary.71
v15.2.0-canary.72
v15.2.0-canary.73
v15.2.0-canary.74
v15.2.0-canary.75
v15.2.0-canary.76
v15.2.0-canary.77
v15.2.0-canary.8
v15.2.0-canary.9
v15.2.1
v15.2.1-canary.0
v15.2.1-canary.1
v15.2.1-canary.2
v15.2.1-canary.3
v15.2.1-canary.4
v15.2.1-canary.5
v15.2.1-canary.6
v15.2.2-canary.0
v15.2.2-canary.1
v15.2.2-canary.2
v15.2.2-canary.3
v15.2.2-canary.4
v15.2.2-canary.5
v15.2.2-canary.6
v15.2.2-canary.7
v15.3.0
v15.3.0-canary.0
v15.3.0-canary.1
v15.3.0-canary.10
v15.3.0-canary.11
v15.3.0-canary.12
v15.3.0-canary.13
v15.3.0-canary.14
v15.3.0-canary.15
v15.3.0-canary.16
v15.3.0-canary.17
v15.3.0-canary.18
v15.3.0-canary.19
v15.3.0-canary.2
v15.3.0-canary.20
v15.3.0-canary.21
v15.3.0-canary.22
v15.3.0-canary.23
v15.3.0-canary.24
v15.3.0-canary.25
v15.3.0-canary.26
v15.3.0-canary.27
v15.3.0-canary.28
v15.3.0-canary.29
v15.3.0-canary.3
v15.3.0-canary.30
v15.3.0-canary.31
v15.3.0-canary.32
v15.3.0-canary.33
v15.3.0-canary.34
v15.3.0-canary.35
v15.3.0-canary.36
v15.3.0-canary.37
v15.3.0-canary.38
v15.3.0-canary.39
v15.3.0-canary.4
v15.3.0-canary.40
v15.3.0-canary.41
v15.3.0-canary.42
v15.3.0-canary.43
v15.3.0-canary.44
v15.3.0-canary.45
v15.3.0-canary.46
v15.3.0-canary.5
v15.3.0-canary.6
v15.3.0-canary.7
v15.3.0-canary.8
v15.3.0-canary.9
v15.3.1-canary.0
v15.3.1-canary.1
v15.3.1-canary.10
v15.3.1-canary.11
v15.3.1-canary.12
v15.3.1-canary.13
v15.3.1-canary.14
v15.3.1-canary.15
v15.3.1-canary.2
v15.3.1-canary.3
v15.3.1-canary.4
v15.3.1-canary.5
v15.3.1-canary.6
v15.3.1-canary.7
v15.3.1-canary.8
v15.3.1-canary.9
v15.4.0
v15.4.0-canary.0
v15.4.0-canary.1
v15.4.0-canary.10
v15.4.0-canary.100
v15.4.0-canary.101
v15.4.0-canary.102
v15.4.0-canary.103
v15.4.0-canary.104
v15.4.0-canary.105
v15.4.0-canary.107
v15.4.0-canary.108
v15.4.0-canary.109
v15.4.0-canary.11
v15.4.0-canary.110
v15.4.0-canary.111
v15.4.0-canary.112
v15.4.0-canary.113
v15.4.0-canary.114
v15.4.0-canary.115
v15.4.0-canary.116
v15.4.0-canary.117
v15.4.0-canary.118
v15.4.0-canary.119
v15.4.0-canary.12
v15.4.0-canary.120
v15.4.0-canary.121
v15.4.0-canary.122
v15.4.0-canary.123
v15.4.0-canary.124
v15.4.0-canary.125
v15.4.0-canary.126
v15.4.0-canary.127
v15.4.0-canary.128
v15.4.0-canary.129
v15.4.0-canary.13
v15.4.0-canary.130
v15.4.0-canary.14
v15.4.0-canary.15
v15.4.0-canary.16
v15.4.0-canary.17
v15.4.0-canary.18
v15.4.0-canary.19
v15.4.0-canary.2
v15.4.0-canary.20
v15.4.0-canary.21
v15.4.0-canary.22
v15.4.0-canary.23
v15.4.0-canary.24
v15.4.0-canary.25
v15.4.0-canary.26
v15.4.0-canary.27
v15.4.0-canary.28
v15.4.0-canary.29
v15.4.0-canary.3
v15.4.0-canary.30
v15.4.0-canary.31
v15.4.0-canary.32
v15.4.0-canary.33
v15.4.0-canary.34
v15.4.0-canary.35
v15.4.0-canary.36
v15.4.0-canary.37
v15.4.0-canary.38
v15.4.0-canary.39
v15.4.0-canary.4
v15.4.0-canary.40
v15.4.0-canary.42
v15.4.0-canary.43
v15.4.0-canary.45
v15.4.0-canary.46
v15.4.0-canary.48
v15.4.0-canary.49
v15.4.0-canary.5
v15.4.0-canary.50
v15.4.0-canary.51
v15.4.0-canary.52
v15.4.0-canary.53
v15.4.0-canary.54
v15.4.0-canary.55
v15.4.0-canary.56
v15.4.0-canary.57
v15.4.0-canary.58
v15.4.0-canary.59
v15.4.0-canary.6
v15.4.0-canary.60
v15.4.0-canary.61
v15.4.0-canary.62
v15.4.0-canary.63
v15.4.0-canary.64
v15.4.0-canary.65
v15.4.0-canary.66
v15.4.0-canary.67
v15.4.0-canary.68
v15.4.0-canary.69
v15.4.0-canary.7
v15.4.0-canary.70
v15.4.0-canary.71
v15.4.0-canary.72
v15.4.0-canary.73
v15.4.0-canary.74
v15.4.0-canary.75
v15.4.0-canary.76
v15.4.0-canary.77
v15.4.0-canary.78
v15.4.0-canary.79
v15.4.0-canary.8
v15.4.0-canary.80
v15.4.0-canary.81
v15.4.0-canary.82
v15.4.0-canary.83
v15.4.0-canary.84
v15.4.0-canary.85
v15.4.0-canary.86
v15.4.0-canary.87
v15.4.0-canary.88
v15.4.0-canary.89
v15.4.0-canary.9
v15.4.0-canary.90
v15.4.0-canary.91
v15.4.0-canary.92
v15.4.0-canary.93
v15.4.0-canary.94
v15.4.0-canary.95
v15.4.0-canary.96
v15.4.0-canary.97
v15.4.0-canary.98
v15.4.0-canary.99
v15.4.1
v15.4.2-canary.0
v15.4.2-canary.1
v15.4.2-canary.10
v15.4.2-canary.11
v15.4.2-canary.12
v15.4.2-canary.13
v15.4.2-canary.14
v15.4.2-canary.15
v15.4.2-canary.16
v15.4.2-canary.17
v15.4.2-canary.18
v15.4.2-canary.19
v15.4.2-canary.2
v15.4.2-canary.20
v15.4.2-canary.21
v15.4.2-canary.22
v15.4.2-canary.23
v15.4.2-canary.24
v15.4.2-canary.25
v15.4.2-canary.26
v15.4.2-canary.27
v15.4.2-canary.28
v15.4.2-canary.29
v15.4.2-canary.3
v15.4.2-canary.30
v15.4.2-canary.31
v15.4.2-canary.32
v15.4.2-canary.33
v15.4.2-canary.34
v15.4.2-canary.35
v15.4.2-canary.36
v15.4.2-canary.37
v15.4.2-canary.38
v15.4.2-canary.39
v15.4.2-canary.4
v15.4.2-canary.40
v15.4.2-canary.41
v15.4.2-canary.42
v15.4.2-canary.43
v15.4.2-canary.44
v15.4.2-canary.45
v15.4.2-canary.46
v15.4.2-canary.47
v15.4.2-canary.48
v15.4.2-canary.49
v15.4.2-canary.5
v15.4.2-canary.50
v15.4.2-canary.51
v15.4.2-canary.52
v15.4.2-canary.53
v15.4.2-canary.54
v15.4.2-canary.55
v15.4.2-canary.56
v15.4.2-canary.6
v15.4.2-canary.7
v15.4.2-canary.8
v15.4.2-canary.9
v15.5.0
v15.5.1-canary.0
v15.5.1-canary.1
v15.5.1-canary.10
v15.5.1-canary.11
v15.5.1-canary.12
v15.5.1-canary.13
v15.5.1-canary.14
v15.5.1-canary.15
v15.5.1-canary.16
v15.5.1-canary.17
v15.5.1-canary.18
v15.5.1-canary.19
v15.5.1-canary.2
v15.5.1-canary.20
v15.5.1-canary.21
v15.5.1-canary.22
v15.5.1-canary.23
v15.5.1-canary.24
v15.5.1-canary.25
v15.5.1-canary.26
v15.5.1-canary.27
v15.5.1-canary.28
v15.5.1-canary.29
v15.5.1-canary.3
v15.5.1-canary.30
v15.5.1-canary.31
v15.5.1-canary.32
v15.5.1-canary.33
v15.5.1-canary.34
v15.5.1-canary.35
v15.5.1-canary.36
v15.5.1-canary.37
v15.5.1-canary.38
v15.5.1-canary.39
v15.5.1-canary.4
v15.5.1-canary.5
v15.5.1-canary.6
v15.5.1-canary.7
v15.5.1-canary.8
v15.5.1-canary.9
v16.*
v16.0.0
v16.0.1
v16.0.1-canary.0
v16.0.1-canary.1
v16.0.1-canary.2
v16.0.1-canary.3
v16.0.1-canary.4
v16.0.1-canary.5
v16.0.1-canary.6
v16.0.2-canary.0
v16.0.2-canary.1
v16.0.2-canary.10
v16.0.2-canary.11
v16.0.2-canary.12
v16.0.2-canary.13
v16.0.2-canary.14
v16.0.2-canary.15
v16.0.2-canary.16
v16.0.2-canary.17
v16.0.2-canary.18
v16.0.2-canary.19
v16.0.2-canary.2
v16.0.2-canary.20
v16.0.2-canary.21
v16.0.2-canary.22
v16.0.2-canary.23
v16.0.2-canary.24
v16.0.2-canary.25
v16.0.2-canary.26
v16.0.2-canary.27
v16.0.2-canary.28
v16.0.2-canary.29
v16.0.2-canary.3
v16.0.2-canary.30
v16.0.2-canary.31
v16.0.2-canary.32
v16.0.2-canary.33
v16.0.2-canary.34
v16.0.2-canary.4
v16.0.2-canary.5
v16.0.2-canary.6
v16.0.2-canary.7
v16.0.2-canary.8
v16.0.2-canary.9
v16.1.0
v16.1.0-canary.0
v16.1.0-canary.1
v16.1.0-canary.10
v16.1.0-canary.11
v16.1.0-canary.12
v16.1.0-canary.13
v16.1.0-canary.14
v16.1.0-canary.15
v16.1.0-canary.16
v16.1.0-canary.17
v16.1.0-canary.18
v16.1.0-canary.19
v16.1.0-canary.2
v16.1.0-canary.20
v16.1.0-canary.21
v16.1.0-canary.22
v16.1.0-canary.23
v16.1.0-canary.24
v16.1.0-canary.25
v16.1.0-canary.26
v16.1.0-canary.27
v16.1.0-canary.28
v16.1.0-canary.29
v16.1.0-canary.3
v16.1.0-canary.30
v16.1.0-canary.31
v16.1.0-canary.32
v16.1.0-canary.33
v16.1.0-canary.34
v16.1.0-canary.4
v16.1.0-canary.5
v16.1.0-canary.6
v16.1.0-canary.7
v16.1.0-canary.8
v16.1.0-canary.9
v16.1.1
v16.1.2
v16.1.3
v16.1.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-59472.json"