Next.js Discord

Discord Forum

NextJs Servers Hacked ?

Unanswered
Cirneco dell'Etna posted this in #help-forum
Open in Discord
Cirneco dell'EtnaOP
Do anybody know about this ? Can this cause security issue with existing NextJs version ?

News Source - https://cybersecuritynews.com/pcpcat-hacked-next-js-servers/

I'm not sure which location servers were these.

6 Replies

@Cirneco dell'Etna Do anybody know about this ? Can this cause security issue with existing NextJs version ? News Source - https://cybersecuritynews.com/pcpcat-hacked-next-js-servers/ I'm not sure which location servers were these.
B33fb0n3
yea, CVE-2025-29927 was a vulnability in nextjs and it got fixed in future versions. Depending on what your "existing nextjs version" is, it might be already fixed for you
B33fb0n3
@Cirneco dell'Etnasolved?
Cirneco dell'EtnaOP
Version upgrade is still in progress. Literally 100 developers worked on this finance project.. Too many dependencies not compatible with latest NextJs.
@Cirneco dell'Etna Version upgrade is still in progress. Literally 100 developers worked on this finance project.. Too many dependencies not compatible with latest NextJs.
B33fb0n3
There are "patches" that are published. You can just keep your major version and just upgrade to the patch. There are no breaking changes
Cirneco dell'EtnaOP
Yeah
@Cirneco dell'Etna Yeah
B33fb0n3
so why having issues with upgrading?