CVE-2025-30218

x-middleware-subrequest-id may be leaked to external hosts

x-middleware-subrequest-id が外部ホストに漏洩する可能性

Disclosure Date

2025-04-02

Credit

Product URL

vercel/next.js

Reference

https://github.com/vercel/next.js/security/advisories/GHSA-223j-4rm8-mrmf

Back