Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
GitHub Actions next may allow unauthorized code execution
published 1 month ago
Summary
The 'next' package used in GitHub Actions and the rootio/@rootio/next library contained a security weakness that could let an attacker run unwanted code. The problem has been fixed in recent releases. Update the affected packages to the latest version as soon as possible to stay protected.
What to do
- Update GitHub Actions next to version 15.5.10-aikido.6.
- Update rootio @rootio/next to version 15.5.10-root.io.6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:npm | GitHub Actions | next |
< 15.5.10-aikido.6 Fix: upgrade to 15.5.10-aikido.6
|
| Root:npm | rootio | @rootio/next |
< 15.5.10-root.io.6 Fix: upgrade to 15.5.10-root.io.6
|
Original advisory text
AIKIDO-2026-10760 in next - Patched by Root
Root has patched AIKIDO-2026-10760 in the next package for Root:npm. Multiple fixed versions available.
Timeline
Published17 Sep 2026
Updated17 Sep 2026
First seen17 Sep 2026
Sources
Track software like this
Free during beta